Trojan horse help?

[Riyko]

My friend has a Trojan Horse - Downloader - conhook virus on her computer and it's in C:/Windows/System32/loglog.dll and she's done everything possible to delete it, but it's still there. It finds it and quarentens it, but it never stays quarentened and when she goes back to see if's still there it's gone.

Is there anything else she can do to get rid of the virus?

 

[JonB2004]

My friend has a Trojan Horse - Downloader - conhook virus on her computer and it's in C:/Windows/System32/loglog.dll and she's done everything possible to delete it, but it's still there. It finds it and quarentens it, but it never stays quarentened and when she goes back to see if's still there it's gone.

Is there anything else she can do to get rid of the virus?

If you search around on the web, you should find some sort of virus killer, I think. Or your friend might have to buy a program. Or you friend might have to format her hard drive and re-install her operating system.

 

[ckeo]

this seems to be a helpful thread:
http://www.bullguard.com/forum/8/Trojan-downloader-conhook-Viru_21384.html

also try spybot and adaware....
also... try googling for the virus name.


I cant be more specific because i never seem to get these things myself... although... i use firefox which seems to be alot more secure.

 

[FiveParadox]

RE: Trojan Horse

Riyko, which virus scanner is your friend using?

Is the virus removing itself from the quarantine and restoring its former position, or is it a new copy of the virus that's returning to the System32 subfolder?

 

[Riyko]

She has Norton's Anti Virus and it doesn't dectect it, She also uses Spysweeper and it quarentens it, but the virus escapes.

Thank you for the help JonB2004

 

[Riyko]

sorry for the double post heh

FiveParadox
The virus is removing itself from the quaratine and restoring itself to it's original position.

ckeo
I'll show my friend that site as well.

 

[Kreskin]

Some guy has created a program called Vundo Fix. It's a little scary to use as you eventually have to shut down all of your security and go to safe mode to use it but it was the only thing that worked for me. Check around for this and see if Vundo Fix is a fix for your problem.

 

[JonB2004]

Safe mode. Don't you have to start your computer in DOS when you do that? I hate using DOS. Scares the hell out of me.

 

[Kreskin]

That Vundo Fix is a really scary way of getting rid of the program but it worked. Just sharing my experience with it as it scared the heck out of me. I felt like I was taking a huge risk but am alive and well because of it.

 

[Riyko]

My friend wanted to thank you guys for your help, she got the trojan horse quaratined.