Author: slickr, Posted: Mon Jan 11, 2010 7:17 am Post subject: Need help with dozen of trojans ---- Hi there. I need help with removing dozen of trojans.
I'd like to know if i delete these trojans, if my operating system "XP" will boot or would i need to reinstall?
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
c:\WINDOWS\system32\sshnas.dll (Trojan.Downloader) -> No action taken.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshnas (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\LREC75DND7 (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\E8WECRKKMV (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lrec75dnd7 (Trojan.Agent) -> No action taken.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\WINDOWS\system32\sshnas.dll (Trojan.Downloader) -> No action taken.
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> No action taken.
C:\WINDOWS\msa.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Slick\Local Settings\Temp\a.exe (Trojan.Dropper) -> No action taken.
C:\Documents and Settings\Slick\Local Settings\Temp\b.exe (Trojan.Dropper) -> No action taken.
C:\Documents and Settings\Slick\Local Settings\Temp\c.exe (Trojan.Dropper) -> No action taken.
Author: dariola, Posted: Thu Mar 04, 2010 1:59 pm Post subject: ---- Looks like you have a big problem here and strange that nobody haven't answered.
I don't know if you have to reinstall xp or not, i think nobody can say that but for sure you have to get rid of these trojans as quickly as possible.
Just wondering that what u did to get this amount of trojans
Author: Packrat1947, Posted: Fri Mar 05, 2010 9:03 am Post subject: ---- Scan with Malwarebytes and Superantispyware. Remove anything they find. They are very safe, and us technicians use them everyday.