Re: backdoor.afcore.bb HELL

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 02/01/04 

Date: Sun, 1 Feb 2004 06:18:53 -0500

Shewman,
Use the below as a reference only!
http://computercops.biz/postt12463.html

As you can see in the HijackThis log, (as Sandi mentioned)
These type trojans use random file names.
[example]
F1 - win.ini: run=yxxsdvxn.exe, tdmpuv.exe, dsgkatjskt.exe,
cduklntejyvc.exe, lvtucjb.exe

Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-25-04]
Please post replies to this Newsgroup, email address is invalid 

--
"Shewman" <shewman@sympatico.ca> wrote in message
news:_cDSb.44891$mf4.1596318@news20.bellglobal.com...
> Hi,
>
> I've got a friend who has this trojan. I can't get rid of it. Found it in
> the registry and deleted the entries. Rebooted but the entries get added
> again. Tried uninstalling the dll, ftdpwmk.dll, but I get access denied.
> Everytime, I try another i.e. view processes, her PC reboots. Went into
safe
> mode but I can't find the source file(s).
>
> I've tried searching google but didn't find anything. Also tried searching
> Norton and sophos
>
> Anyone have any ideas??? It's an XP PC. Unfortunately, she's a couple of
> hundred miles away. But I can remote into the PC.
>
> Thanks
>
>
>

Relevant Pages

  • Re: backdoor.afcore.bb HELL
    ... > As you can see in the HijackThis log, ... > These type trojans use random file names. ... >> the registry and deleted the entries. ... >> I've tried searching google but didn't find anything. ...
    (microsoft.public.security)
  • Re: backdoor.afcore.bb HELL
    ... Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file ... > free Firewall.With secure dll authentication enabled,by ... using registry entries and MSCONFIG itself ... >>> I've tried searching google but didn't find anything. ...
    (microsoft.public.security)
  • Re: Screen Saver Tab gone, pc clean & registry keys fine, please H
    ... This PC was severly infected with spyware/adware and viruses and trojans. ... Ran Adaware, Spybot S&D, trendmicro online, panda online, AVG, ewido, trojan ... Here's the HijackThis log: ... Internet Explorer v6.00 SP2 ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Trojan removal
    ... I have posted my Hijackthis Log on the SWI forum. ... >Blocking Spyware, Adware, Parasites, Hijackers, Trojans, ...
    (microsoft.public.security.virus)
  • hijack this log
    ... I have posted my Hijackthis Log on the SWI forum. ... >Blocking Spyware, Adware, Parasites, Hijackers, Trojans, ...
    (microsoft.public.security.virus)