Trojan Removal Instructions
If you`re not running any antivirus or firewall software, you should install some ASAP.
Download and install the free AVG or Avast antivirus programmes and either the free Zonealarm or Kerio firewall programmes. You can get them HERE, HERE, HERE and HERE.
Install whichever firewall you chose, followed by whichever antivirus programme you chose. Reboot your system the required number of times. Run the antivirus updates.
ONLY INSTALL THE ABOVE ANTIVIRUS/FIREWALL SOFTWARE, IF YOU DON`T ALREADY HAVE ANY.
-----------------------------------------------------------------------------------------------------------------------------------
Download HijackThis from HERE. Unzip it and place it in it`s own directory such as C:\program files\hijackThis\HijackThis1991.exe.
DO NOT PUT HJT ON THE DESKTOP OR IN A TEMP FOLDER
-----------------------------------------------------------------------------------------------------------------------------------
THIS IS VERY IMPORTANT.
Rename the Hijackthis.exe file to HijackThis1991.exe. This is because some malware can hide from HijackThis.exe. Right click the Hijackthis1991.exe file and send to desktop(create shortcut).
Under no circumstances should you add any items to the HJT ignore list.
------------------------------------------------------------------------------------------------------------------------------------
Download and install AVG Antispyware(formerly Ewido) from http://www.ewido.net/en/download/
Double-click the icon on your desktop to run it.
On the top of the main screen click Shield. Click the word active to change it to inactive.
On the top of the main screen click 'Update'. Then click on 'Start update'. The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can get the manual update at http://download.ewido.net/ewido-sign...ll-current.exe
When you have finished updating, exit AVG Antispyware.
Download and install the latest version of SS&D from HERE. Make sure you have the latest definition files. Click the immunize button in the lefthand pane, then click the green immunize cross in the righthand pane. Close SS&D.
Download and install the latest version of Ad-Aware personal se from HERE. Make sure you have the latest definition files. Close Ad-aware se.
Download the Ccleaner programme from HERE.
Run the programme and make sure all the boxes are ticked under the Windows and Applications tabs. Click the run cleaner button with no browsers open. Do this several times. Click on issues, then the scan for issues button. Click the fix selected issues button, followed by the fix all selected issues button. Do this several times, until no more issues are found.
Make sure you have the latest definition files/updates for your antivirus programme.
Download and run these four tools. Follow the instructions for using each tool.
Tool1, Tool2, Tool3, Tool4
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html
Run a full system scan with your antivirus programme and delete whatever it finds, including anything in the virus vault.
Run SS&D and fix whatever it finds.
Run Ad-Aware personal se. Click start, uncheck scan for negligible risk entries.
Select perform full system scan and click next, fix whatever it finds.
Make sure all windows are closed. Run AVG Antispyware..
Click 'Scanner'. Then click 'Complete System Scan' to begin scanning.
When the scan is complete click 'Recommended Action' and change it to 'Quarantine'.
Then click 'Apply all actions'.
Once finished, click the save scan report button, followed by the Save report as button and save it to your desktop.
Reboot into normal mode, turn system restore back on and rehide your protected OS files.
Run a HJT scan. attach the log file as an attachment into a new thread in our Networking & Security Section(unless you`ve already got a thread here). Also, attach the AVG Antispyware log. Please note: HJT and any other logs must not be posted as .doc files. This is due to the risk of viruses etc.
