Re: Trojan Downloader

From: "GS" <gsmsnews.microsoft.comGS@xxxxxxxxxxxxxxxxx>

| have you try safe mode?
| system restore roll back prior to the infection?
|
| if still fails, disable system restore
| How to turn off or turn on Windows XP System Restore"
| in safe mode
| WARNING: Symantec strongly recommends that you back up the registry before
| making any changes to it. Incorrect changes to the registry can result in
| permanent data loss or corrupted files. Modify the specified keys only. Read
| the document, "How to make a backup of the Windows registry," for
| instructions.
|
| ----------------------------------------------------------------------------
| ----
|
| 1.. Click Start, and then click Run. (The Run dialog box appears.)
| 2.. Type reedit
|
| Then click OK. (The Registry Editor opens.)
|
| 3.. Navigate to each of these keys:
|
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
|
| 4.. For each one, in the right pane, delete any values that refer to any
| files that were detected as Downloader.Trojan.
|
| 5.. Exit the Registry Editor.
| you should be able to delete the file by now, actually once in safe mode you
| should be able to delete the file
|
| my philosohy is if not microsoft, Symantec, CA, Mcafee, or other vendors I
| deal with or some major ISV of the above, I don't download
|

The file; C:\WINDOWS\system 32\ljjjgff.dll
is a DLL, not an EXE, it is NOT loaded via the Registry Run locations.

This DLL file is protected by the OS via a BHO and via the DLL being loaded winlogin/notify

Thanx for trying but...
you missed the mark
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.

Relevant Pages

  • Re: Trojan Downloader
    ... | have you try safe mode? ... | system restore roll back prior to the infection? ... Symantec strongly recommends that you back up the registry before ... If you find any references to it in the registry, but aren't sure they can be safely removed, post what you find. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Computer is Out Of Range
    ... then instead of changing the fonts I changed the resolution instead then I clicked apply then all went Out of Range. ... Then, I searched up on google on how to fix this kind of stuff and one of them says I need to connect the computer to another monitor, which I don't have and F8 for safe mode but no luck.. ... If you normally leave System Restore disabled (such ... the resolution choice is stored in the registry. ...
    (microsoft.public.windowsxp.hardware)
  • Re: Trojan Downloader
    ... have you try safe mode? ... system restore roll back prior to the infection? ... How to turn off or turn on Windows XP System Restore" ... Symantec strongly recommends that you back up the registry before ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Entered Password then computer restarts - never get logged on
    ... The next step would be a manual System Restore - see here: ... profiles and both do the same. ... I also tried in safe mode and same thing. ... The problem has to be with the local registry. ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan Downloader
    ... |>> system restore roll back prior to the infection? ... Symantec strongly recommends that you back up the registry before ... |>> you should be able to delete the file by now, actually once in safe mode you ... This DLL file is protected by the OS via a BHO and via the DLL being loaded ...
    (microsoft.public.windowsxp.help_and_support)