| | |
Infected with trojan.BHO!!!
![]() |
•
•
Join Date: Jul 2009
Posts: 5
Reputation:
Solved Threads: 0
Good afternoon
I have an Acer Aspire 8930G notebook with Windows Vista Home Premium and ever since i bought it i was using ESET internet security.About a month ago i started using Kaspersky.I connect to the internet through a wired router Netgear DG834.
About a week ago i stopped connecting to the internet and whatever i did(i changed router passing from a Dlink 524T to the Netgear and i also changed cable) i couldn't restore my internet connection.Note that the other 2 computers connected to the network don't present any problem with internet.
From the first time i scanned my computer with Kaspersky and it didn't find anything.Afterwards i scanned my system with Malwarebytez and it dicovered 9 infections,2 of which were a partner.dll and a partner.exe located in the folder programdata of partision C.
Despite the fact that i cleared the infections with MBA,nothing changed!!!Ever since i tried several things:
1) Recovering the windows from the hidden Acer partition(PQSERVICE) using the eRecovery program by Acer to the factory conditions
2) After formatting completely the hard disk and consequently erasing the acer PQSERVICE partition,i tried to install windows by the recovery CD's i created with the eRecovery program
3) Formatting the hard disk using Killdisk and installing another copy of Windows Vista,that a friend borrowed
The result is that in the first two situations MBA revealed the presence of trojan.BHO and afterwards when i was trying to scan with RootkitReveal and GMER, my system was crashing all the time with blue screen
in the third situation MBA scan was clean meanwhile GMER revealed the presence of two rootkits.After deleting these rootkits nothing changed!!
I clarify that while formatting,my notebook wasn't connected with a cable to the router and before connecting it,i was reseting the router
Could anyone please help me out??
Thank you
P.S. My network adapter is an Atheros AR8121 and whenever i put the cable in,the green light on the right side come and go and my status passes from local only to limited connectivity
I have an Acer Aspire 8930G notebook with Windows Vista Home Premium and ever since i bought it i was using ESET internet security.About a month ago i started using Kaspersky.I connect to the internet through a wired router Netgear DG834.
About a week ago i stopped connecting to the internet and whatever i did(i changed router passing from a Dlink 524T to the Netgear and i also changed cable) i couldn't restore my internet connection.Note that the other 2 computers connected to the network don't present any problem with internet.
From the first time i scanned my computer with Kaspersky and it didn't find anything.Afterwards i scanned my system with Malwarebytez and it dicovered 9 infections,2 of which were a partner.dll and a partner.exe located in the folder programdata of partision C.
Despite the fact that i cleared the infections with MBA,nothing changed!!!Ever since i tried several things:
1) Recovering the windows from the hidden Acer partition(PQSERVICE) using the eRecovery program by Acer to the factory conditions
2) After formatting completely the hard disk and consequently erasing the acer PQSERVICE partition,i tried to install windows by the recovery CD's i created with the eRecovery program
3) Formatting the hard disk using Killdisk and installing another copy of Windows Vista,that a friend borrowed
The result is that in the first two situations MBA revealed the presence of trojan.BHO and afterwards when i was trying to scan with RootkitReveal and GMER, my system was crashing all the time with blue screen
in the third situation MBA scan was clean meanwhile GMER revealed the presence of two rootkits.After deleting these rootkits nothing changed!!
I clarify that while formatting,my notebook wasn't connected with a cable to the router and before connecting it,i was reseting the router
Could anyone please help me out??
Thank you
P.S. My network adapter is an Atheros AR8121 and whenever i put the cable in,the green light on the right side come and go and my status passes from local only to limited connectivity
Last edited by nerwnas; Jul 2nd, 2009 at 10:44 am.
Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Download the update from here if you have problems.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
Make sure that you restart the computer.
Download HijackThis Executable from here. Save it to your desktop.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and then go to the format Tab and make sure that wordwrap is unchecked. Copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Download the update from here if you have problems.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt
Make sure that you restart the computer.
Download HijackThis Executable from here. Save it to your desktop.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and then go to the format Tab and make sure that wordwrap is unchecked. Copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.
![]() |
Similar Threads
- Assistance with Trojan.bho.h / atmli.dll (Viruses, Spyware and other Nasties)
- Trojan.bho (Viruses, Spyware and other Nasties)
- Suspected trojan.bho (Viruses, Spyware and other Nasties)
- Infected: Trojan-downloader.win32.small.dam, Spyware (Viruses, Spyware and other Nasties)
- Infected by Trojan Horse (Viruses, Spyware and other Nasties)
- Infected by trojan horse (Community Introductions)
- cmid32.dll infected with Trojan.Tofger and cant delete this file! (Web Browsers)
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: New win32 virus help.
- Next Thread: res://C:\WINDOWS\system32\xpsp3res.dll/dnserror.htm - Can't go online
| Thread Tools | Search this Thread |
adware anti-malware anti-virussitesaccessissue antivirus apple attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial conficker connect control cyber cybercrime cyberwarfare ddos education email europe exam exploit facebook fake fancheckvirus gaming gtaiv halloween hijack hosting internet iphone kaspersky legal logfiles mail malware mcafee messagelabs microsoft mobile msn nazi news obama onlinethreats paedophile panel parents patch phishing police policeprovirusmba-mblockedinternetaccess president privacy pro problem redirect redirecting reliability report research risk rogueantivirus samhain sans scareware school search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen translate trojan unabletoaccessanti-virussites unwanted update usa virus viruses vista war warning windows worm yahoo zeroday






