Trojan virus. Advice please.
#1
Scooby Regular
Thread Starter
Join Date: Jan 2005
Location: Lincolnshire
Posts: 15,623
Likes: 0
Received 0 Likes
on
0 Posts
Trojan virus. Advice please.
Hi,
Eveytime i open Internet Explorer i get this warning.
I move it to the vault but it keeps coming back.
I found it and its here. I delete it but it returns.
http://homepage.ntlworld.com/paul123/paul123/schll.jpg
I've got AVG and zone alarm, windows xp.
Any advice.
thanks
Paul.
Eveytime i open Internet Explorer i get this warning.
I move it to the vault but it keeps coming back.
I found it and its here. I delete it but it returns.
http://homepage.ntlworld.com/paul123/paul123/schll.jpg
I've got AVG and zone alarm, windows xp.
Any advice.
thanks
Paul.
Last edited by paulr; 06 October 2007 at 03:03 PM. Reason: cvv
#2
Scooby Regular
Join Date: Mar 1999
Location: The Great White North
Posts: 25,080
Likes: 0
Received 0 Likes
on
0 Posts
Reboot into safe mode then run your AVG software and get it to remove the item and then see if it comes back. You could also try healing the file, or if possible actually get it deleted.
#3
Scooby Regular
Thread Starter
Join Date: Jan 2005
Location: Lincolnshire
Posts: 15,623
Likes: 0
Received 0 Likes
on
0 Posts
#5
Best thing I can suggest is to download the trial of Kaspersky AV here.... Kaspersky Anti-Virus free trial download
and also download the updates for it here.... Setting Updater
Then, disconnect from the internet and turn off AVG and Zone Alarm completely, even uninstall them if you have to.
Once done, install Kaspersky and update it, then let it do it's thing, it's an awesome piece of kit. Oh and maybe even consider buying it, AVG is a useless pile of dung in my experience. I know lots swear by it, but I swear at it
You may also need to run a Spyware remover, you can't beat Spybot for that job.... The home of Spybot-S&D!
And finally, once you have ran those programs, go get HijackThis.... http://download.hijackthis.eu/hijackthis_199.zip
...run it, and paste the log here for analysis.... HijackThis Logfileauswertung
And finally, if after all of this you still can't get the little bugger because the file is locked or whatever, then you could try Killbox to just remove the file.... KillBox.Net
and also download the updates for it here.... Setting Updater
Then, disconnect from the internet and turn off AVG and Zone Alarm completely, even uninstall them if you have to.
Once done, install Kaspersky and update it, then let it do it's thing, it's an awesome piece of kit. Oh and maybe even consider buying it, AVG is a useless pile of dung in my experience. I know lots swear by it, but I swear at it
You may also need to run a Spyware remover, you can't beat Spybot for that job.... The home of Spybot-S&D!
And finally, once you have ran those programs, go get HijackThis.... http://download.hijackthis.eu/hijackthis_199.zip
...run it, and paste the log here for analysis.... HijackThis Logfileauswertung
And finally, if after all of this you still can't get the little bugger because the file is locked or whatever, then you could try Killbox to just remove the file.... KillBox.Net
Last edited by D16GER; 06 October 2007 at 10:20 PM.
#6
Youve got a BHO... Browser helper object...
run spybot search and destroy followed by ad aware....
and then run hijack this
this should kill the little ******
then and this is very important
DONT intstall Yahoo/google or whatever else superduper toolbar thats offered to you.......
why people use these is beyond me
and finally......the best move of all
Get rid of IE and use firefox, ...far better than IE
and update your virus proggy and firewall as well
Avast & comodo are free and pick up ore than the others ive used
Mart
run spybot search and destroy followed by ad aware....
and then run hijack this
this should kill the little ******
then and this is very important
DONT intstall Yahoo/google or whatever else superduper toolbar thats offered to you.......
why people use these is beyond me
and finally......the best move of all
Get rid of IE and use firefox, ...far better than IE
and update your virus proggy and firewall as well
Avast & comodo are free and pick up ore than the others ive used
Mart
Trending Topics
#8
Scooby Senior
Join Date: Feb 2000
Location: West Midlands
Posts: 5,763
Likes: 0
Received 0 Likes
on
0 Posts
#11
It seems to have many options - not all of which I've fully explored yet and it's all free.
I like the control I have over it and the way it works. For example, if you have an App which wants to connect to net or changes 3 files (say on install), you set Comodo to allow the action for all 3 files. With Kerio you had to click 3 times. Of course, you can turn the 'training' mode off too. I also used to have annoying requests from Kerio when shutting down to install Windows Updates. If I forget it would mean my machine wouldn't turn off.
But best of all for me, it seems much faster - especially on startup.
#12
Scooby Regular
Thread Starter
Join Date: Jan 2005
Location: Lincolnshire
Posts: 15,623
Likes: 0
Received 0 Likes
on
0 Posts
http://homepage.ntlworld.com/paul123/paul123/virus2.jpg
Here is the file but i cant delete it. I've tried most of the stuff recommended, even Killbox but they all say, "cant delete this file".
Its in WINDOWS\System32 folder.
Cant even delete it manually.
Here is the file but i cant delete it. I've tried most of the stuff recommended, even Killbox but they all say, "cant delete this file".
Its in WINDOWS\System32 folder.
Cant even delete it manually.
#14
Scooby Regular
iTrader: (8)
Have you not considered paying for a different AVG I use kaspersky and I dont have any bother with any virus's or trojans ever??? I used to be bothered when I ran blueyonders free virus scan ??? But once I started paying for a proper service I never seem to worry about anything any more
#15
Scooby Regular
iTrader: (2)
I had this problem not long ago. Tried everything, solution was fresh install.
Back your files up to the second hard drive or a portable hard drive and re-install. Problem will be fixed and will have taken you less time than all the programmes you have been trying.
Kaspersky didnt find my Trojan
AVG did and deleted it but it came back
Spybot did and deleted it and it came back
Other stuff didnt find it
Norton was installed and fully up to date
Back your files up to the second hard drive or a portable hard drive and re-install. Problem will be fixed and will have taken you less time than all the programmes you have been trying.
Kaspersky didnt find my Trojan
AVG did and deleted it but it came back
Spybot did and deleted it and it came back
Other stuff didnt find it
Norton was installed and fully up to date
#16
Scooby Regular
Thread Starter
Join Date: Jan 2005
Location: Lincolnshire
Posts: 15,623
Likes: 0
Received 0 Likes
on
0 Posts
I had this problem not long ago. Tried everything, solution was fresh install.
Back your files up to the second hard drive or a portable hard drive and re-install. Problem will be fixed and will have taken you less time than all the programmes you have been trying.
Kaspersky didnt find my Trojan
AVG did and deleted it but it came back
Spybot did and deleted it and it came back
Other stuff didnt find it
Norton was installed and fully up to date
Back your files up to the second hard drive or a portable hard drive and re-install. Problem will be fixed and will have taken you less time than all the programmes you have been trying.
Kaspersky didnt find my Trojan
AVG did and deleted it but it came back
Spybot did and deleted it and it came back
Other stuff didnt find it
Norton was installed and fully up to date
#17
Paul. Try this mate...
SDFix by Andy Manchetser..
It needs to be run in safe mode with Admin rights, but may mean the difference between a re-install..
SDFix
Before you do, run 'Hijack This' as suggested below and compare some of the entries on your log to the entries on the list from the link above.
(Note: you may spot stuff in the Hijack This log that look tempting to manually remove. Unless you really know what you're doing, be very careful as you can do some damage and you'll end up doing a re-install anyway!!)
The link above gives an extensive list of Trojans it can find and remove and you may some of them on your log.
SDFix by Andy Manchetser..
It needs to be run in safe mode with Admin rights, but may mean the difference between a re-install..
SDFix
Before you do, run 'Hijack This' as suggested below and compare some of the entries on your log to the entries on the list from the link above.
(Note: you may spot stuff in the Hijack This log that look tempting to manually remove. Unless you really know what you're doing, be very careful as you can do some damage and you'll end up doing a re-install anyway!!)
The link above gives an extensive list of Trojans it can find and remove and you may some of them on your log.
Last edited by Alan C; 17 October 2007 at 09:11 PM.
#18
Scooby Senior
Join Date: Nov 2001
Location: West Yorks.
Posts: 4,130
Likes: 0
Received 0 Likes
on
0 Posts
Its highly likely the virus is exploiting system restore to re-instate itself. Right click My Computer, select Properties from the bottom of the menu, then click the System Restore tab. Check the 'Turn off System Restore' box and run your AV again, then reboot. You can switch system restore back on again later when the virus has been zapped.
#19
Scooby Regular
Join Date: May 2000
Location: MY00,MY01,RX-8, Alfa 147 & Focus ST :-)
Posts: 10,371
Likes: 0
Received 0 Likes
on
0 Posts
Om the subject of paying for some of this stuff - Webroot is the best anti spyware program that I have come across. Only about £15 / 20 a year. Well worth it. And again, based on my own personal experience, the only freeware AV that comes close to the fully paid versions is Avira - well worth looking at.
Once you've cleaned up your system I would also suggest using Advanced WindowsCare V2 Personal - which is free and highly effective!
I agree with what MJW is saying as well.
Once you've cleaned up your system I would also suggest using Advanced WindowsCare V2 Personal - which is free and highly effective!
I agree with what MJW is saying as well.
#20
run in safe mode, find all the associated files in c: & system32, rename them so main prog doesnt run (each time they are deleted & auto rerun theyll have a different name), delete registry entries, delete virus files
deleted that sch162.dll file too?
deleted that sch162.dll file too?
Last edited by InvisibleMan; 19 October 2007 at 03:06 PM.
Thread
Thread Starter
Forum
Replies
Last Post
Sam Witwicky
Engine Management and ECU Remapping
17
13 November 2015 10:49 AM