HTJ support needed

[shortanu]

I have problems to remove the remon.sys trojan or what it is. My Zone Alarm keep found and thread it but it reapears in a second. I don't know what to do .. i've read earlier posts and scaned my comp with HJT. here is my log

*edit*


i hope that someone would help me. See ya

 

[N3051M]

see this topic here

https://www.techspot.com/vb/topic42785.html

info on the actual worm is here

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SDBOT.CJR&VSect=P

run through any of the above removal procedures, then post a new hjt log...

and while you're running in safe mode, scan also for teh 4 nasties -ad/spy/malware, virus with your favorite scanners......

 

[Didou]

READ : How to post your Hijackthis log-file as an ATTACHMENT

 

[shortanu]

damn..

I have did that things and it keeps bugging me.. Here's my new hjt log.
My zone alarm find it as Win32.Efewe.H .. and the file infected is C:\Windows\system32\remon.sys
Hope that can be fixed.

 

[howard_hopkinso]

Hello and welcome to Techspot.

You are running a completely unpatched version of Windows. Please install at least service pack 1 and preferably service pack 2.

HJT will not do anything for or against a rootkit infection.

Go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.

Then see. How to remove Hacktool.Rootkit

Then post a fresh HJT log.

Regards Howard :wave: :wave: