This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Multiple Trojans, computer is locked up. Im lost!

2 min read

This thread's last reply is from December 19, 2010, 10:13 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Lorenzo37
Hello,
I have an emachine computer with Windows XP on it.
I can only boot up in safe mode wich is where im writing you now. It gets stuck on the blue start up screen. I was unable to run Hijackthis so i do not have any logs. the only program i was able to run was a-squared emisoft wich found multiple trojans but was unable to remove them. I also tried to download and run various other spyware programs such as malwarebytes and adaware. i was able to download them but they wouldn't run, cutting off after a few seconds. The trojans that a-squared were able to find were :

Trojan.Win32.Hiloti!IK
Trojan.Win32.BHO!IK
Trojan.Win32.Meredrop!.....There are 4 of these in different locals
Trojan.Crypt!IK
Backdoor.Win32Papras!

Im pretty sure there are more of these that i dont know about. I can't run anything. I also remember seeing the fake microsoft sequrity alert on there. If there is any other info i can give please let me know. Im not sure how to go about getting a log to you as this seems pretty important. Im at my wits end. Any help would be much appreciated.

Thank you,
Lorenzo
NonSuch Administrator
We understand that you are having difficulty running certain programs, including HijackThis. However, in order for us to help you it is necessary that you provide us with a HijackThis log, and it is possible you may be able to trick the malware into letting you do this. First, download HijackThis to a clean computer, then rename it from HijackThis.exe to any other name you want, using an .exe extension, for example... YourLastName.exe. Once you have done that, burn it to a CD (preferable to using a flash drive that may easily become infected) then transfer the renamed file to the infected computer and run a scan, then start a new topic and include your HijackThis log.

If that does not work, try the following:

Download/run Rkill:

Please download Rkill from one of the following links and save to your Desktop:

One, Two or Three

  • Double click on Rkill.
  • A command window will open then disappear upon completion, this is normal.
  • Please leave Rkill on the Desktop until otherwise advised.


Note: If your security software warns about Rkill, please ignore and allow the download to continue.

Next, please follow the guideline at the link below to start a new topic and post your HijackThis log. If you are unable to create and post a HijackThis log, then your only option may be to reformat your computer and reinstall the operating system.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<