HELP NEEDED TO REMOVE TROJAN

derrick

Hope someone can help,my AVG7 has just informed me that I have a TROJAN but it will not get rid of it.

Details:
Trojan found DlucaAW
while opening file C:\docume~1\locals~1\temp\wnk92.exe

I do not know about opening this file or what it relates to

Info on AVG virus pop up:

INFO: no further info about this infection

Move to virus vault: Requested action is not available for this object

Delete file: Requested action is not available etc

Heal: " " " " " " " "

Another window just popped up,same virus different file,whilst I was typing this post,didn`t have time for all details, tempfiles(I think) 98.exe

Am running Windows xp with AVG7, and Adaware latest,
have just run Trend Micro scan,no viruses,but obviously
these are Trojans!
Are they harmfull,and how do I get rid of them?
Please not to technical.

All help gratefully appreciated

Thanks

maninblack_3

download the cleaner from moosoft
https://www.moosoft.com

that should do it for you

maninblack

Toxteth_OGrady

Ewido should shift it.

Free trial available to download.

8)

TOG

derrick

None of the above found anything.
Have had this Trojan coming up all afternoon relating to temp internet files,have deleted temp internet files.
Have managed to put two of these into AVG virus vault,

some details in there:

Trojan horse downloader: Dluca.AW
Healable: No
Status: Infected
Source computer: 2AD4D897B9

Any more ideas? ???

sevlow

You coud try Adaware by Lavasoft.

http://www.lavasoftusa.com

look for resourses/download on lh pane. They offer software free for home use.

Also try spybot - serach and destroy. just type spybot into a search engine. Also free,

Good luck & let us know how you did

Malestrom

To remove the TrojanDownloader.Ducla virus you need to:

1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Restart the computer in Safe mode or VGA mode
4. Run a full system scan and delete all the files detected as Downloader.Dluca.
5. Delete the value that was added to the registry Run key.

Go to Symantec's page here for full instructions on how to accomplish the above. Dont worry about all the references to Norton AntiVirus, just do the same actions with AVG instead. Basically you will need to reboot in Safe mode to allow AVG to remove the virus, then you need to edit the registry to remove the key that loads the trojan.

If AVG still wont remove the virus in safe mode (step 4), then you'll have to do it manually. Write down the path to the virus, boot in safe mode, then open Explorer and navigate to the file. RIGHT-CLICK on it and select delete from the context menu. Remember to empty the recycle bin. You may have to disable AVG if it wont let you select the file for deletion. You are perfectly safe as long as you RIGHT-CLICK it!!

When you reboot normally, run a full AVG scan again, it may find further files. Also, make sure you are using a firewall (Sygate or ZoneAlarm) as these will stop any trojans from actually being able to call home to the originating site.

BigAl94

Download A2 free from here http://www.emsisoft.com/en/software/free/, should sort it out.

derrick

Thanks for all the info, I think it is now gone,although I did enlist the help of an aquaintance who did various things including running a Mcfee scan,so hopefully no more problems with that one :-/

jazzeeeee5

If you managed to put in the VAULT in AVG, just delete it! Right click and delete the virus from there. Pretty safe once in the vault unless you play around with it!

Jazz

jazzeeeee5

Cant recommend Spybot Search and Destroy highly enough! If all else fails, download Hijack This and sign up on free forum where a clever techie bod will answer your plee (usually within a couple of hours) and help you through the right deletions! NOT FOR THE FAINT HEARTED!

Jazz


Some 'expert' techie forums: (I have used each of these):

http://tomcoyote.org/ (fab guys!)
http://forums.techguy.org/forumdisplay.php?f=54
http://www.spywareinfo.com/
http://www.safer-networking.org/en/index.html
http://pcpitstop.ibforums.com/
http://forums.spywareinfo.com/index.php?b=1
http://www.wilderssecurity.com/ (fab guys!)
http://www.annoyances.org/

derrick

Cant recommend Spybot Search and Destroy highly enough! If all else fails, download Hijack This and sign up on free forum where a clever techie bod will answer your plee (usually within a couple of hours) and help you through the right deletions! NOT FOR THE FAINT HEARTED!

Jazz


Some 'expert' techie forums: (I have used each of these):

http://tomcoyote.org/ (fab guys!)
http://forums.techguy.org/forumdisplay.php?f=54
http://www.spywareinfo.com/
http://www.safer-networking.org/en/index.html
http://pcpitstop.ibforums.com/
http://forums.spywareinfo.com/index.php?b=1
http://www.wilderssecurity.com/ (fab guys!)
http://www.annoyances.org/

Thanks, have saved these to my favourites list,but hope I will never need them.