Trojan removal. what next?

Reluctant_spender

This virus is also known as koobface; details listed below

Net-Worm.Win32.Koobface.a spreads when a user accesses his/her MySpace account. The worm creates a range of commentaries to friends' accounts. Net-Worm.Win32.Koobface.b, which targets Facebook users, creates spam messages and sends them to the infected users' friends via the Facebook site. The messages and comments include texts such as Paris Hilton Tosses Dwarf On The Street; Examiners Caught Downloading Grades From The Internet; Hello; You must see it!!! LOL. My friend catched you on hidden cam; Is it really celebrity? Funny Moments and many others.

dazed

C:\Windows\system32\SearchFilterHost.exe

Is not a good start .... Are you up to date with windows updates etc?

loopylisa87

I should be up to date, have automatic updates on, and they do download quite regularly. is there any way i can push the faster if not automatic?
will run scan again.

loopylisa87

aaargh it says hjackthis is already running, (it's not) how do i perform another scan, won't let me uninstall cos already running apparently

dazed

loopylisa87 wrote: »

aaargh it says hjackthis is already running, (it's not) how do i perform another scan, won't let me uninstall cos already running apparently

Reboot is probably your best bet.

Do you have system restore on?

And have you tried combo fix like I suggested?

loopylisa87

dazed wrote: »

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Easy as pie and will get rid of the nasties.

Free also

will do this, but have to go offline for a while. many thanks for the advice so far.

chelleybelley

hi i got fb trojan stupid me fell for link!!anyway got windows live onecare which removed it then found backdoor one and eventually removed that too have done full scan on firewall and one care and both say system is good now...had an email tho saying that id signed up to christmas parks catalogue which i havent tried to contact them but cannot without account number...should i be worried about any emails now what can the trojans access??

Reluctant_spender

If you have had a backdoor trojan I would change all passwords from a known safe computer.

chelleybelley

have cleared all trojans and cleared all history,temporary files,cookies etc will this be enough with the trojan gone???

aliEnRIK

chelleybelley wrote: »

have cleared all trojans and cleared all history,temporary files,cookies etc will this be enough with the trojan gone???

Have you scanned with malwarebytes?
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&!!!!!button
UPDATE and QUICK SCAN