yibbleyab Posted September 20, 2008 CID Share Posted September 20, 2008 ok so about a month ago I got a pop up that went to a porn site. I thought this was very strange since I dont usually get pop ups. Did a system scan with Adaware and it didnt find anything so I dismissed it. about a week later I started to get more and more pop ups trying to get me to download a registry cleaner and a program called MicroAV. I did another scan and it found a Win32.Trojandownloader.delf.AW but the computer would auto restart before scans could be completed ( i got this box that said windows would shut down in 60 seconds) Could not find anything on the that file specifically although I did find stuff on other Delf trojans, but nothing worked. Trend Micro's Housecall said I was infected with Troj_Tibs.ckn but could not delete infected files. I also have Norton Systemworks installed but the virus def's ran out awhile ago. I still like the other options like One Button Checkup and Norton WinDoctor, so i've kept NSW. I've tried scanning in all 3 Safe Modes with no luck. One site said that trojans can hide in the Sytem Restore so I disabled that and scanned again. The scans are coming up clean now but there are still some issues. My Explorer keeps closing and re-opening, and the pop ups are way out of hand now (every new web page loaded or anytime a page is refreshed they show up) and sometimes when I close iexplorer I get a error box saying CTF Loader encountered a problem and needs to close. I've tried to google some answers but have not found anything that seems to work. Here are the Adaware logs and Hijack this Logs. Any help would be more then appreciated. ADAWARE LOGS: ArchiveData(auto-quarantine- 2008-09-15 19-07-42.bckp) Referencefile : SE1R285 04.09.2008 ====================================================== WIN32.TROJANDOWNLOADER.AGENT Quote Link to comment Share on other sites More sharing options...
mudmanc4 Posted September 20, 2008 CID Share Posted September 20, 2008 Try using unlocker This is the direct download ! If you still cannot delete the file, then download Malwarebytes' Anti-Malware to your desktop from: malwarebytes-antimalware run the setup.exe , tick the boxes that say "Update Malwarebytes' Anti-Malware and Launch Malwarebytes " then restart and scan in safemode. Quote Link to comment Share on other sites More sharing options...
coknuck Posted September 20, 2008 CID Share Posted September 20, 2008 If you want to read the HiJackThis log file go here. http://www.hijackthis.de/ You do have a couple problems. Quote Link to comment Share on other sites More sharing options...
Sequoia Posted September 21, 2008 CID Share Posted September 21, 2008 You may have to try & find a specific trojan remover for this one.It looks like it made several Registry entries. If you can't try the AVG forum & ask about this trojan. You might try emptying the AVG virus vault & scan again. Do the same for any other anti-virus you have. I don't run more than one AV because I've read not to . Do a disk clean up with at least the Windows one. Then use the error checking & then defrag. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.