Trojan Horse virus please advise

  Nemo_t 19:16 26 Mar 2008

Hi Everyone

For a few days now my laptop has been rather on the slow side and often freezes up whilst in mid search of an internet site give or take about 30 secs it works again.

I have AVG installed on my laptop ran a scan this mornin and nothing showed.

Now it has come up that a threat has been detected

Its says this as follows :

While opening file: C:\WINDOWS\system32\jkklk.dll Trojan horse Generic10.XQ

I have 4 options after this Ignore, Info, Hel or Move to Vault, Ive healed this twice no but its still coming up when I try and move it to vault it wont let me.

So ive ran AVG Anti Spyware it found 24 cookies but not this Trojan

Anyone any ideas ?

Thanks in advance

  rossgolf 19:17 26 Mar 2008

move to vault will contain ti and stop it from doin any harm

  mfletch 19:20 26 Mar 2008

Try downloading and running SAS Superantispyware,

SAS Free version/ click here

  Nemo_t 19:22 26 Mar 2008

If I go to move it the the vault it comes up with

If the system file is removed from the disk, the opertaing system may cause an error and may be unusable.

Do you yes want to move the file into the Virus Vault

Yes or No?

I hope you understand why im reluctant to do this

  rossgolf 19:27 26 Mar 2008
  skidzy 19:32 26 Mar 2008

" C:\WINDOWS\system32\jkklk.dll Trojan horse Generic10.XQ "

I maybe wrong here but i believe you are infected with a variant of Vundo.

Try the VundoFix click here

Follow the instructions to the letter ! (recommend you print this out).

  brundle 19:32 26 Mar 2008

Trojans generate/re-generate using random names, a google search won't do much good.
Remove it, if you have problems hit F8 at boot up and choose Last Known Good configuration.

  Jak_1 20:10 26 Mar 2008

Sounds like it is sitting in residency in the system restore files.
Antivirus can not clear anything from these files whilst system restore is active.
Turn off system restore via the control panel. Re-boot the pc in safe mode, keep tapping the F8 key at bootup and then choose safe mode. Run your antivirus; once this has been done, take the opportunity to run your antispy programs whilst in this mode. Once all are complete re-boot to normal and re-instate system recovery. Doing this will clear all your restore points however.

  skidzy 20:32 26 Mar 2008

Turning off System Restore is not guaranteed to solve the problem but can be effective at times.

Just to make you aware Nemo,its better to have an infected System Restore point than no restore point at all....keeping a restore point gives you options.

If you have no joy with the programs above it will be time to run HJT and post the scan log at a Malware removal forum and let the real experts that specialise in this field sort you out.

Hijackthis click here
Malwareremoval click here

  Nemo_t 21:55 26 Mar 2008

Hi again

Ive had enough now im going to do a format to the H/D

In windows set up what does this mean :

The file pcmcia.sys is corrupted
Press any key to continue

Does this mean my H/D Is dead??

  Nemo_t 22:01 26 Mar 2008

Just tried again and now its saying

The file perc2.sys is corrupted

Press any key to continue

Im gonna cry soon can someone plsssssssss help me

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Xiaomi Mi Mix 2 review

What went wrong at the Designs of the Year 2017

iPhone X news: Release date, price, new features & specs

Comment créer, modifier et réinitialiser un compte Apple ?