Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Help! Trojanloader?

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Help! Trojanloader?

Unread postby doc223 » May 12th, 2008, 11:14 pm

My desktop computer went 'red-screen' on me, and keeps saying that I have been infected. A box keeps opening claiming infection with "Trojanloader.xs".

Virus scan(McAfee) is negative (ran it 3 times).

Spybot S&D cleaned 26 & 25 'infections' (ran it twice).

Found your site while researching 'trojanloader' from laptop.

I have minimal control of desktop computer in "safe mode". Cannot get to your website to download the 'highjackthis' program, thus, no log. While in normal mode, IE windows to a sales website for 'antispyware spider' kept opening. Then eventually, dozens of 'about.blank' IE windows opened simutaneously.

I am somewhat of a newbie on the technical aspects. Can I load the 'highjackthis' program to CD and then feed it to my desktop? If so, how? Help!
Active Member
Posts: 1
Joined: May 12th, 2008, 10:30 pm
Register to Remove

Re: Help! Trojanloader?

Unread postby SpotCheckBilly » May 19th, 2008, 5:31 pm

Hello doc223,

Welcome to the MRU.

Okay, having no Internet connection creates some problems, but I don't think that they are insurmountable.

===Very Important===

The instructions in this thread have been specifically designed for THIS USER'S MACHINE ONLY . You should not use these instructions to clean your machine. Doing so could cause irreparable damage to your machine. If you need assistance, please start your own thread.

Please do not run any scans/tools or other fixes unless I ask you to. This is very important for several reasons. Here are just two of them:
1. The tools that we use are very powerful and can cause >>irreparable damage<< to your computer if not used correctly.
2. Commercial scanners, for the most part can not completely remove some of the more "resistant" infections. This makes it much more difficult to get rid of completely.

If you are running P2P filesharing program(s).
  • Many of these programs come with unwanted components bundled with them.
  • To find out whether the one(s) you are using are considered safe, click here or here.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

My recommendation is you uninstall it.

If you decide to keep it, do not use it until your computer is cleaned.

If you are running any cracked/pirated software, uninstall it before proceeding. Many helpers -- myself included -- will not assist you if you are using such software.

Remember, we are in this process together. We must cooperate with each other or the fix will surely fail. If, at any time, there is something you don't understand or a scan that you cannot run -- Do not skip the step or scan.. Please take a moment to stop and ASK! Always remember -- there is no such thing as a stupid question.

That being said, let's get started. :)

Have a friend download HJTInstall.exe from Here or Here. have them burn it to a CD. Insert the CD containing HJTInstall.exe into the CD drive on your computer. Double-click the My Computer icon on your desktop. Double-click the drive containing the CD you inserted (usually D:). Then:
  • Copy HJTInstall.exe.
  • Right-click on any open area on your desktop.
  • Click "Paste". This will place the HijackThis setup icon (HJTInstall.exe) on your desktop.
  • Double click the HJTInstall.exe icon on your desktop.
  • Click Install.
  • By default program will install to C:\Program Files\Trend Micro\HijackThis.
  • HijackThis (HJT) will launch.
  • Close any/all browsers, messenger, mediaplayer, Office and mail client windows and applications.
  • Click Do a system scan and save a logfile
  • When the scan is finished, a Notepad window will open containing the contents.
  • Save it to your desktop as "HJT log.txt".
  • Do Not click the AnalyzeThis button.
  • Using a blank CD or floppy disk, transfer HJT log.txt to a computer with Internet access and return to this thread.
  • Open HJT log.txt using Notepad (Not Word or WordPad).
  • Hit Ctrl+a to select all of the logs contents.
  • Hit Ctrl+c to copy the logs contents.
  • In this board.
  • Click Reply.
  • Hit Ctrl+v to paste the log into the Message body box..
  • DO NOT have HijackThis fix anything yet. (Most of what it finds will be harmless or even essential.)
  • Make certain your post shows the entire log, please.
NOTE: For subsequent HijackThis scans:
Double click the HijackThis shortcut on your desktop.

I'll take a look at your log and get back to you with my recommendations ASAP. :wave:

User avatar
MRU Master
MRU Master
Posts: 943
Joined: February 22nd, 2005, 5:14 am
Location: Twin Cities, MN

Re: Help! Trojanloader?

Unread postby NonSuch » May 24th, 2008, 3:19 am

Due to lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.
User avatar
Posts: 27598
Joined: February 23rd, 2005, 7:08 am
Location: California

Return to Infected? Virus, malware, adware, ransomware, oh my!

Who is online

Users browsing this forum: No registered users and 63 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware