Malware Removal Forums

troj-start uo trogan- need to remove

phoenix777 · 2007-12-13T15:48:09+00:00

Hi again, have a pc with a start up trojan written to the registry files. Have disabled system restore swept machine and find the trojan each time with is deleted ok only for it reload each time. can you help? Log attached Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:16:05, on 12/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\PC Tools Firewall Plus\FWService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kontiki\KService.exe C:\Program Files\Intel\Wireless\

30 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

phoenix777

February 18, 2008, 6:26 PM UTC

Elrond,

I would be grateful of an idiot proof guide, but any help you can give would be grateful.

Elrond Admin/Teacher Emeritus

February 24, 2008, 8:23 PM UTC

Sorry that I did not come back to you sooner. :oops:

It is very hectic at the boards at the moment. we are all awamped with people looking for help and I missed your reply.

I would recommmend that you go to either CastleCops http://www.castlecops.com. Register there and then go to the Windows NT/2000/2003/XP forum and post a request for help there. Please mention that Elrond sent you and that there does not seem to be any malware left on the computer. I am well known as a helper there as well. Sorry that I could not help you with this problem.Also let them know that they can find the thread here posting.php?mode=edit&f=11&p=268735 .

Elrond Admin/Teacher Emeritus

February 26, 2008, 5:55 AM UTC

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.