TechSpot

clean up after trojan.ciadoor.m

By tdwebste
Dec 19, 2006
  1. Errors: Task Manager has been disabled by your administrator
    registry editing has been disabled by your administrator

    complains that scvhost is missing on login

    Thanks

    Tim

    =============

    I have ran AVG Anti-Spyware and it found
    Backdoor.Ciadoor.13 in wsock32.sys, scvhost.exe XJXVGjLadj.ini
    Trogan.Ciadoor.m in HKLM\SOFTWARE\Classes\CLSID\{E14.....}
    HKU\S-1-5-21-1821229471-21734044852-2971641868-1006\Software\Microsoft\Windows\CurrentVersion\Ext|Stats\{E14....}

    hijackthis log the is too long to fit so I shortened it :(
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    I have moved your thread to the correct forum.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.


    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.


    Regards Howard :wave: :wave:


    This thread is for the use of tdwebste only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...