Forum Home
Press F1
 
Thread ID: 94367 2008-10-26 22:09:00 trojan or virus? k8smum (6062) Press F1
Post ID Timestamp Content User
714976 2008-10-27 03:22:00 try this
goto start...programs.. accessories..system tools. Run disk cleanup put a tick in temporary internet files as a well as any others you are inclined to, click on ok
when its finished

also clear out your java cache go to the java controll applet in control panel to do this

then do a complete virus scan with your virus software
beama (111)
714977 2008-10-27 03:23:00 Clear the cache in IE, or use ccleaner and run it. It should remove it

Get trojan remover if you havent yet, its below, install update then scan.

Then select all options under the utilities menu
Speedy Gonzales (78)
714978 2008-10-27 07:24:00 Okay, I've done everything you suggested. I ran Trend again and it found nothing. However, it's still reporting that file distr4[1].exe has been quarantined. Is this because it found it in an earlier scan? How do I access the quarantined file to delete it? When I try to remove it from within Trend I get the message "Unable to delete the file. Your computer may have locked the file, or you may lack sufficient privileges to access the file." Ta. k8smum (6062)
714979 2008-10-27 07:31:00 hi
has that virus checker program got a help file, sorry I never used your virus checker.

If its quarantined I would think that trend is not going to let you do anything to it, thats why I suggest the help file within the virus checker app.
beama (111)
714980 2008-10-27 07:38:00 I wouldnt worry about it. If its quarantined, it wont do any harm

Are you the only user on this PC?? Or a guest?
Speedy Gonzales (78)
714981 2008-10-27 07:49:00 Hi
There's me and two other family members who use this PC. After I restarted the PC, Trend now reports another virus found: TROJ_ADCLICKE.IB in kcntktdl.exe. I can delete it, but it comes back after each restart. Says its in WINDOW\system32 but I can't find it. And ads pop up spontaneously - one came up just now wth the header RON ads by bannerstyles 15. This is getting really annoying...
k8smum (6062)
714982 2008-10-27 08:08:00 Install malwarebytes. Make sure it gets installed for all users.

Then update it then scan
Speedy Gonzales (78)
714983 2008-10-27 08:31:00 While you're at it, get Hijackthis from Speedys Sig, download/run and select save a log - Copy post the complete log back here.

SPEEDY--- Don't have time at the moment - but when the logs posted take a look at This page (www.threatexpert.com) - the reg may need to be cleaned out further.
wainuitech (129)
714984 2008-10-27 08:36:00 Trojan remover MAY find that.

Its got Adclicker, Adclicker.C, O, (looks like these can get installed or bundled with software)

And trojan.adclicker (Generic detection for a program designed to simulate clicks on website banner advertisements to increase traffic artificially in its database)

If its the same thing
Speedy Gonzales (78)
714985 2008-10-28 04:17:00 Thanks for all your help, but I think HWMBO (but only sometimes) is going to reformat the c drive - wouldn't be the first time. Cheers k8smum (6062)
1 2 3