Bastard Trojan

[odris]

I am 10 hours in to a long battle with a motherfuckin' Trojan, the bastard won't go. I have tried all i can think of, trend micro housecall couldn't remove it and after installing spybot and another software i found that this trojan was stopping me from opening them, what a cunt it is. Any ideas?

[Joe Le Taxi]

Have you installed Spybot search and destroy?

[odris]

Yes but unable to run it due to the trojan stopping me.

[Joe Le Taxi]

When you did a scan did you manage to locate where abouts the Trojan was? Oh and what is the direct name of the Trojan?

[odris]

I have got dr. web cureit running now, it located one of the bastards named "Trojan.HohoSpy.2"

[Joe Le Taxi]

Yeah I was going to say use this Download Dr.Web CureIt! Free anti-virus scanner, cures computers viruses.

 

This looks good as well How to remove a Trojan, Virus, Worm, or other Malware

[Jennings]

When you run something that may be suspicious or you have reason to question it (such as a keygen), run it in sandboxie first.

 

Also why did Spybot fail? Some trojans set your internet to use a proxy - this prevents Spybot from accessing the net for updates, but hitting cancel will still execute spybot and delete the trojan (if it is in SpyBots dictionary).

[odris]

Bastard i fell asleep about 3am now i have to start dr. web cureit all over again.

 

SpyBot just won't open, i click it on the desktop and nothing happens at all.

[Jennings]

...

 

SpyBot just won't open, i click it on the desktop and nothing happens at all.

 

Something must be killing it.

- Have a look in task manager. Stop any curiously named process that are running in the context of your user.

- Or, try renaming the spybot executable name and rerunning it.

 

Sorry I can't come up with anything more concrete.

[odris]

There are so many different processes running that out of the 50 any one of them could be it.

[gaz75]

runscanner could probably help with this problem.

 

Would also recommend Sophos anti-rootkit and Malwarebytes anti-malware.

 

I cannot post any links low post count

[George Costanza]

try running combofix

[Caramac]

Trojan Remover 6.8.1

 

Just download the fully working 30 day trial.

 

Its removed baddies for me that others won't.

[Uncle_Meat]

try running combofix

 

 

^^^^^^^^

This. The man speaketh truth.

 

 

Probably best in Safe Mode. Also, if it's one of those ones that stops certain files from running, try renaming the ComboFix file.

 

 

When it asks to install a Recovery Console (if you've not got one already), do so as there are some odds & sods it won't remove without one.

 

Mop up afterwards with Malwarebytes Antimalware or Superantispyware.

[FieldingMellish]

Try a boot CD,

.

[Joe Le Taxi]

Get off the porn?

[camdenred]

try running combofix

 

That's your friend.

[odris]

It's sound, fixed it. Used a combination of unhackme which deleted the file stopping me running malwarebytes, so then after i ran that i did a final check with spybot and now it is sorted.

[MokTheAfflicted]

OneCare ??