Help Pls

[dave1987]

so i was on my pc today and realised it was acting a bit funny i scanned it wis my superantispyware witch fount a virus i got rid of that 1 so then i scanned with avg,norton and super antu spyware and none of them can find this virus witch i no for definate i have and i cant get rid of it has any 1 had it before and no how to get rid of it or a free software that can get rid of i thanks in advance the trojans name is in the subtitle

 

[dave1987]

i take it no one nos about it ??

 

[natural blue nina]

Make sure your virus definition files are up to date (as of today) and rescan. Alternatively, check out the Security Updates on the Symantec website. They always have removal tools on there.

Good luck with it! My company is battling with some evil MSN-based virus today... fun fun fun!!!

 

[dave1987]

all my anti viruses is up to date it seems to be able to hide from them there is ones out there on the net that can do it but there expensive and there is instructions on how to do it but i dont have a clue what there talking about lol

 

[dave1987]

ANY1

 

[dave1987]

bump

 

[chrisdoesntmiss]

try spybot from safer-networking.org, then smitfraud fix, smitrem, sdfix and then hijackthis (found via google)

IT support is my job, if they dont remove it post back.

Chris

 

[dave1987]

iv tried spybot that didnt work,smitfraudfix has fount 363 errors should i back up before removing them? thanks for your help aswell

smitfraus is 50 dollars are any of them free as i dont want to buy 4 of them 2 get rid of it

 

[dave1987]

still no luck getting rid of it?

 

[chrisdoesntmiss]

Try these,

Smitfraudfix

Smitrem

Also in HiJackThis this is what you need to follow

Open My Computer >Tools >Folder Options >View >CHECK "Show hidden files and folders",
UNCHECK "Hide protected operating system files" and then click Ok.


Then run HIJACKTHIS again, press the Do a system scan only button and place a checkmark next to the following infected items, to fix them later:

O2 - BHO: (no name) - {00DBDAC8-4691-4797-8E6A-7C6AB89BC441} - C:\WINDOWS\system32\ssqpp.dll
O20 - Winlogon Notify: ssqpp - C:\WINDOWS\SYSTEM32\ssqpp.dll



After you have checked all of these items:
1. Close any opened Explorer windows, if you do have any open.
2. Please press the FIX CHECKED button in HIJACKTHIS, to fix these infected entries.

Open a My Computer window and delete this file in bold:
C:\WINDOWS\SYSTEM32\ssqpp.dll

Scan with Spybot.

Open My Computer >Tools >Folder Options >View >CHECK "Do not show hidden files and folders",
CHECK "Hide protected operating system files" and then click Ok.

I have stolen the file details from another site about this trojan so if they are not there post back.

Chris

 

[chamberpot]

Hi, I'm surprised that Spybot/Norton can't fix it. Is it spelled correctly?
I've just done a search and can't find any info on it.

If Spybot/Norton can find it but can't fix it, may be due to windows system restore being enabled, and you will have to turn system restore off before you can remove it.

Norton website has lots of info on trojan downloader removal tools. Good luck, I had a securitytoolbar 7.1 incident recently and it caused havoc with my pc.

Best wishes, Don

 

[dave1987]

yes spybot,norton,avg,spywarefighter none of them find it but spyware doctor finds it but then it also wants £50 to join i looke don the symanatec website and couldnt find anything about trojan-downloader.conhook

 

[chamberpot]

yes spybot,norton,avg,spywarefighter none of them find it but spyware doctor finds it but then it also wants £50 to join i looke don the symanatec website and couldnt find anything about trojan-downloader.conhook

In that case my friend I think you've been conned by spywaredoctor (JMO). I had the same thing with my above trojan problem. Lots of software companies would do a free scan and then try and charge me money to remove something that I had already removed. I paid 3 different companies to remove malicious software that didn't exist on my pc after spybot had cured it. Don.

 

[dave1987]

do u no much about pc's i could post the log hijackthis does and maybe you could take a look at it?

 

[Darkstar]

Hi, I'm surprised that Spybot/Norton can't fix it. Is it spelled correctly?

I'm not surprised, they're both far from perfect imo.