Reply

Join Date: Aug 2004
Posts: 3
Reputation: rkl69 is an unknown quantity at this point 
Solved Threads: 0
rkl69 rkl69 is offline Offline
Newbie Poster

Trojan.bookmarker.gen

 
0
  #1
Aug 16th, 2004
Help! I have tried EVERYTRHING to try and get rid of Trojan.bookmarker.gen but it keeps manifesting itself!! Any ideas would be greatly appreciated.
Thanks
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 764
Reputation: DaveSW is on a distinguished road 
Solved Threads: 17
DaveSW's Avatar
DaveSW DaveSW is offline Offline
Master Poster

Re: Trojan.bookmarker.gen

 
0
  #2
Aug 16th, 2004
Have you tried ADaware: http://lavasoft.element5.com/software/adaware/
Spybot S&D: http://www.safer-networking.org/en/download/index.html
And updated your antivirus?

Also if you're running antivirus you may need to run it in safe mode, and disable system restore.
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: Trojan.bookmarker.gen

 
0
  #3
Aug 17th, 2004
Try this thread:

http://www.daniweb.com/techtalkforum...ead.php?t=8508

It took awhile, but finally got it cleared up! Follow the steps I did, including posting HJT logs because you may have more problems than you are aware of.
Reply With Quote Quick reply to this message  
Join Date: Aug 2004
Posts: 3
Reputation: rkl69 is an unknown quantity at this point 
Solved Threads: 0
rkl69 rkl69 is offline Offline
Newbie Poster

Re: Trojan.bookmarker.gen

 
0
  #4
Aug 17th, 2004
Hi, yes, I have both Spybot and adware...run both with no luck so far....I have HJT....which I have run numerous times, but I am not sure if I am missing something in the registry? Also, this virus keeps creating new file names....2 this morning so far:
C:\WINDOWS\SYSTEM32\npil.dll
C:\WINDOWS\SYSTEM32\klnkn.dll

Any ideas would be hugely appreciated.
Thanks,

Originally Posted by DaveSW
Have you tried ADaware: http://lavasoft.element5.com/software/adaware/
Spybot S&D: http://www.safer-networking.org/en/download/index.html
And updated your antivirus?

Also if you're running antivirus you may need to run it in safe mode, and disable system restore.
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: Trojan.bookmarker.gen

 
0
  #5
Aug 18th, 2004
Go to the thread I gave you before and look towards the end for instructions on using reglite. It should make theses dll's visible so you can delete them.
Reply With Quote Quick reply to this message  
Join Date: Aug 2004
Posts: 3
Reputation: rkl69 is an unknown quantity at this point 
Solved Threads: 0
rkl69 rkl69 is offline Offline
Newbie Poster

Re: Trojan.bookmarker.gen

 
0
  #6
Aug 23rd, 2004
Originally Posted by dlh6213
Go to the thread I gave you before and look towards the end for instructions on using reglite. It should make theses dll's visible so you can delete them.
Thanks, just to clarify...I am not runnung Windows NT, but XP Pro....do I still follow the same steps? When I follow your steps as per the link you sent me, I see the culprip file in reglite as:
C:\WINDOWS\system32\ms.dll

I just want to be sure I delete the correct file and not something that is a system file.
Thanks......
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 764
Reputation: DaveSW is on a distinguished road 
Solved Threads: 17
DaveSW's Avatar
DaveSW DaveSW is offline Offline
Master Poster

Re: Trojan.bookmarker.gen

 
0
  #7
Aug 23rd, 2004
if you google that file you'll find it's a backdoor trojan, so yes delete it...
Reply With Quote Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: Trojan.bookmarker.gen

 
0
  #8
Aug 24th, 2004
Originally Posted by rkl69
Thanks, just to clarify...I am not runnung Windows NT, but XP Pro....do I still follow the same steps? When I follow your steps as per the link you sent me, I see the culprip file in reglite as:
C:\WINDOWS\system32\ms.dll

I just want to be sure I delete the correct file and not something that is a system file.
Thanks......
I was running XP Home on the computer I had the problem with, but I don't think the OS really matters (as long as it's windows). After you delete the ms.dll, post a HJT log so the senior techs can review it and hopefully mark this thread as solved!
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC