Re: Troj_Renos.DK

From: "dan" <dan@xxxxxxxxxxxxxxxxxxxxxxxxx>

| Post here trying to get some leads as how can I get rid of the above trojan.
| Using xp prof and I ran Norton but it did not find anything (either in safe
| mode or normalmode with latest definition). I ran housecall but it does not
| seems to be unable to fix it (either in safe mode or normal mode). I also
| use Sophos SAV32CLI to clean it but to no avail.
|
| Its located at c:\windows\system32\xkrdk.dll. Can I just delete "xkrdk.dll"
| file? I noticed that I cannot turn of the screen saver. It will always goes
| back to the default setting at 10 min (after "apply" it)........ any other
| options other than clean installation, thanks

If it was just easily deleted then the Sophos 32bit Command Line Scanner (SAV32CLI ) would
have done so.

Download, extract and run Pocket KillBox
http://www.bleepingcomputer.com/files/spyware/KillBox.zip

Reboot the PC into Safe Mode and then perform a full scan in Safe Mode using the Sophos
32bit Command Line Scanner.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.

Relevant Pages

  • Re: Ping Malke
    ... >> the Sophos Command Line Scanner all in one menu driven utility. ... | running from safe mode, be run from safe mode WITH COMMAND PROMPT instead. ... | The reason is that many malware load by injecting through Explorer, ... When you run the script in Normal Mode to update the Command Line Scanner, ...
    (microsoft.public.security.virus)
  • Re: SOPHOS found...
    ... GUI and command line (which I ... tried too) in a Safe Mode are limited ... instruction in Sophos is clear enough - no ... Anti-RootKit utilities look through known areas of system and Registry for ...
    (microsoft.public.security.virus)
  • Re: Ping Malke
    ... the McAfee Command Line Scanner and the ... running from safe mode, be run from safe mode WITH COMMAND PROMPT instead. ... The reason is that many malware load by injecting through Explorer, ...
    (microsoft.public.security.virus)
  • Re: Cant update AdAWare,SpyBot,AVG
    ... I disabled the Windows Firewall, ... When I went to Safe Mode, ... Sophos, and I had to D/L again in Normal Mode. ... > FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Error by Removal of Addware - Spybots from WIN2000 by Norton Antiv
    ... | errant command line. ... I suggest scanning the system in Safe Mode. ... FireWall to allow it to download the needed AV vendor related files. ... needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key ...
    (microsoft.public.win2000.general)