Infected with trojan.BHO!!!

Reply

Join Date: Jul 2009
Posts: 5
Reputation: nerwnas is an unknown quantity at this point 
Solved Threads: 0
nerwnas nerwnas is offline Offline
Newbie Poster

Infected with trojan.BHO!!!

 
0
  #1
Jul 2nd, 2009
Good afternoon

I have an Acer Aspire 8930G notebook with Windows Vista Home Premium and ever since i bought it i was using ESET internet security.About a month ago i started using Kaspersky.I connect to the internet through a wired router Netgear DG834.

About a week ago i stopped connecting to the internet and whatever i did(i changed router passing from a Dlink 524T to the Netgear and i also changed cable) i couldn't restore my internet connection.Note that the other 2 computers connected to the network don't present any problem with internet.

From the first time i scanned my computer with Kaspersky and it didn't find anything.Afterwards i scanned my system with Malwarebytez and it dicovered 9 infections,2 of which were a partner.dll and a partner.exe located in the folder programdata of partision C.

Despite the fact that i cleared the infections with MBA,nothing changed!!!Ever since i tried several things:

1) Recovering the windows from the hidden Acer partition(PQSERVICE) using the eRecovery program by Acer to the factory conditions

2) After formatting completely the hard disk and consequently erasing the acer PQSERVICE partition,i tried to install windows by the recovery CD's i created with the eRecovery program

3) Formatting the hard disk using Killdisk and installing another copy of Windows Vista,that a friend borrowed

The result is that in the first two situations MBA revealed the presence of trojan.BHO and afterwards when i was trying to scan with RootkitReveal and GMER, my system was crashing all the time with blue screen

in the third situation MBA scan was clean meanwhile GMER revealed the presence of two rootkits.After deleting these rootkits nothing changed!!

I clarify that while formatting,my notebook wasn't connected with a cable to the router and before connecting it,i was reseting the router

Could anyone please help me out??

Thank you

P.S. My network adapter is an Atheros AR8121 and whenever i put the cable in,the green light on the right side come and go and my status passes from local only to limited connectivity
Last edited by nerwnas; Jul 2nd, 2009 at 10:44 am.
Reply With Quote Quick reply to this message  
Join Date: Feb 2004
Posts: 9,982
Reputation: crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold 
Solved Threads: 754
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: Infected with trojan.BHO!!!

 
0
  #2
Jul 4th, 2009
Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Download the update from here if you have problems.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Make sure that you restart the computer.

Download HijackThis Executable from here. Save it to your desktop.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and then go to the format Tab and make sure that wordwrap is unchecked. Copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC