Thread: need some help getting rid of a trojan

How long until you get your new one? Like you said - no time for a reimage (PITA), and if you're getting a new one soon, anyway - just make it until that time frame. Hopefully the portables take care of it, and you won't have to worry about it.

Where I work, my group just recently switched from our own private domain outside the realm of the corporate domain to now being on the corporate domain...I hate not being able to install my own stuff and have complete autonomy...

I'm a developer, and we recently switched from desktop/towers to HP elitebooks. More horespower than we had in the desktops, and I can work from home when I want to...LOVE that. They call it a laptop, but it's not exactly small...lol

Check out Rkill, TDSS Killer and Combofix. 9 times out of 10, Those tools will find and clean up a trojan/rootkit. You should get them all at bleepingcomputer.com to avoid fake versions.

Run them in that order too. You'll have many options for Rkill. Rkill.scr is what consistently works for me. It's disguised as a screensaver file so most malware wont notice/block it. It will search for any known processes and kill them for the current session (until you reboot).

TDSS Killer is a rootkit scanner. It has saved me a number of times, but often it doesn't pick anything up at all.

Combofix is by far the best tool I've ever used. It may need Admin access to run though. If you don't have it already, it will probably want to install Microsoft Recovery console. If you cant install it because of lack of admin rights, you could skip it, but there's potential for it to screw up an operating system file and you would not be able to recover it.

That said, I've probably used it near 100 times and I've never needed the recovery console.

Originally Posted by FoSHO99

I just have microsoft security essentials (free) and keep it up to date and a full scan every now and then and no problems.

What works best changes pretty frequently, but I've found security essentials to be useless lately. I was using and recommending it last year, but most of the malware around now will just kill it.

As far as anti-virus goes, I'm currently using the free version of Avast. It works very well. Fully automated updates and scans, and I love the "silent/gaming" mode. It never pops up for any reason.

For malware, I use the tools above. Malwarebytes used to work well, but most malware now will destroy it, literally. Even after the malware is gone, it wont work and uninstall and reinstalling wont work either. I've figured out how to fix it before, but I don't think it's worth it.

At work my boss and I have found that the only mainstream software that work consistently are paid versions of Stopzilla and Spyhunter. Both have more than their fair share of downsides (slowing any PC they're on to a crawl, Disabling legit software without notifying you etc.), but when it counts, they work.

Whew, long post, I need a nap now.

The day I brag and say I don't use chit anymore for security besides my own discretion, will be the day I get a computer bug.
Screw windows defender,Spy-bot(used to be good) and all paid or free anti this or that....I have auto updates turned off and occasionally will look thru updates and update. I just use the windows firewall and the malicious scanner they run after updates. A scan with Malware Bytes everyonce in a while, but it never finds anything. JV16 powertools to clean registry and CCleaner for all the junk. No password remember stuff, delete browsing history on exit, never use the address bar,use Google for all. Windows 7 Microslop seems to be working OK. If anybody should have some funk,I should. I just call myself a Beta tester, for operating systems,movies,music.......well enuf of this......glad the old F2 or F12 for boot config worked.

I would always put your surgeon programs on the Stick from a SAFE machine so the malware doesn't tag along.
could have used boot-helper to get rid of Admin password but they might not have taken a liking to that at work.......

Originally Posted by Bio248

update: back in action. all good to go.

take that IT ****s.

Give Me the HELL YEAH!!!!