Re: SP2 makes XP-Home/SP1 CD useless - TROJANS

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

~ FreeSpirit ~ wrote:
> Although I run Spybot, Adaware, and for the past week or so
> MSAS-Beta, have BHODemon and a StartUpMonitor plus CW SHredder and
> HiJackThis (I found several suspicious things and set them on ignore)
> on my PC - last night MSAS found a Trojan that can't be removed. It's
> called "Trojan.downloader.HBO.req." Looking on the web and
> downloading the Spyware Dr as suggested by I believe Mr. Hall, I
> found nothing to remove it with. SpywareDr. doesn not see it. Only
> MSAV saw it but can't remove it. All I can do is deactivate it with
> HBODemon. You can't delete or remove the pmkhh.dll. If I delete the
> Key it comes back at the next reboot, even in Safe Mode. Paying for
> a program that promises to remove it is chancy since it can generate
> itself with each boot-up from what we understand. Also, this Trojan
> prevents paying for AS/AT/ware. It doesn't allow the page where you
> pay to load. This is the first time in almost 10 years I've had
> anything like this on my PC.

1) You have not had this PC for 10 years.
2) First time you've KNOWN about it..
3) It's "Trojan.Downloader.BHO.Req"..

Try CounterSpy.. It even lists the Trojan you have in their definition list
(sans the typo.)

http://www.sunbelt-software.com/CounterSpy-Download.cfm

Use the 15 day trial - if it cleans it - great.
And to download it - perhaps use another computer? You seem to have two,
piecing together all the other posts.

The list where the trojan you say you have is listed:
http://research.sunbelt-software.com/definitions.cfm?def=182

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


.

Relevant Pages

  • Re: Possible Trojan/Virus: while.com.
    ... This came to one of our lists this morning hit by a similar attack. ... This worm also drops a backdoor trojan that logs ... > What's unusual is that I'd not heard about this payload before. ...
    (Incidents)
  • RE: Possible Trojan/Virus: while.com.
    ... > This came to one of our lists this morning hit by a similar attack. ... This worm also drops a backdoor trojan that> logs ... o receptor deverá destruir a presente mensagem e por gentileza informar o emissor de tal facto. ...
    (Incidents)
  • Re: SP2 makes XP-Home/SP1 CD useless - TROJAN
    ... careful not to open anything suspicious, download anything questionable..... ... Try CounterSpy.. ... It even lists the Trojan you have in their definition list ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Port Chart
    ... There are port ... lists of legitimate registered applications, and there are port lists of ... a big help in identifying a new worm or trojan. ... Again, google helps you ...
    (microsoft.public.win2000.security)
  • Re: SP2 makes XP-Home/SP1 CD useless - TROJAN
    ... > remove this TROJAN before going through another reformat and ... It even lists the Trojan you have in their definition list ... And to download it - perhaps use another computer? ...
    (microsoft.public.windowsxp.configuration_manage)