DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Viruses, Spyware and other Nasties (http://www.daniweb.com/forums/forum64.html)
-   -   Trojan.bookmarker.gen (http://www.daniweb.com/forums/thread9451.html)

rkl69 Aug 16th, 2004 3:46 pm
Trojan.bookmarker.gen
 
Help! I have tried EVERYTRHING to try and get rid of Trojan.bookmarker.gen but it keeps manifesting itself!! Any ideas would be greatly appreciated.
Thanks

DaveSW Aug 16th, 2004 4:40 pm
Re: Trojan.bookmarker.gen
 
Have you tried ADaware: http://lavasoft.element5.com/software/adaware/
Spybot S&D: http://www.safer-networking.org/en/download/index.html
And updated your antivirus?

Also if you're running antivirus you may need to run it in safe mode, and disable system restore.

dlh6213 Aug 17th, 2004 5:47 am
Re: Trojan.bookmarker.gen
 
Try this thread:

http://www.daniweb.com/techtalkforum...ead.php?t=8508

It took awhile, but finally got it cleared up! Follow the steps I did, including posting HJT logs because you may have more problems than you are aware of.

rkl69 Aug 17th, 2004 11:10 am
Re: Trojan.bookmarker.gen
 
Hi, yes, I have both Spybot and adware...run both with no luck so far....I have HJT....which I have run numerous times, but I am not sure if I am missing something in the registry? Also, this virus keeps creating new file names....2 this morning so far:
C:\WINDOWS\SYSTEM32\npil.dll
C:\WINDOWS\SYSTEM32\klnkn.dll

Any ideas would be hugely appreciated.
Thanks,

Quote:

Originally Posted by DaveSW
Have you tried ADaware: http://lavasoft.element5.com/software/adaware/
Spybot S&D: http://www.safer-networking.org/en/download/index.html
And updated your antivirus?

Also if you're running antivirus you may need to run it in safe mode, and disable system restore.


dlh6213 Aug 18th, 2004 11:37 am
Re: Trojan.bookmarker.gen
 
Go to the thread I gave you before and look towards the end for instructions on using reglite. It should make theses dll's visible so you can delete them.

rkl69 Aug 23rd, 2004 4:48 pm
Re: Trojan.bookmarker.gen
 
Quote:

Originally Posted by dlh6213
Go to the thread I gave you before and look towards the end for instructions on using reglite. It should make theses dll's visible so you can delete them.

Thanks, just to clarify...I am not runnung Windows NT, but XP Pro....do I still follow the same steps? When I follow your steps as per the link you sent me, I see the culprip file in reglite as:
C:\WINDOWS\system32\ms.dll

I just want to be sure I delete the correct file and not something that is a system file.
Thanks......

DaveSW Aug 23rd, 2004 5:27 pm
Re: Trojan.bookmarker.gen
 
if you google that file you'll find it's a backdoor trojan, so yes delete it... ;)

dlh6213 Aug 24th, 2004 6:46 am
Re: Trojan.bookmarker.gen
 
Quote:

Originally Posted by rkl69
Thanks, just to clarify...I am not runnung Windows NT, but XP Pro....do I still follow the same steps? When I follow your steps as per the link you sent me, I see the culprip file in reglite as:
C:\WINDOWS\system32\ms.dll

I just want to be sure I delete the correct file and not something that is a system file.
Thanks......

I was running XP Home on the computer I had the problem with, but I don't think the OS really matters (as long as it's windows). After you delete the ms.dll, post a HJT log so the senior techs can review it and hopefully mark this thread as solved!


All times are GMT -4. The time now is 2:01 pm.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC