I Might have a trojan horse Lop.ah on the computer

[odada]

I was wondering if someone could see if there's a serios problem,
because I just found out there was a file called pdsny.dll that was missing.
+ Avg found a trjan horse called Lop.ah.

this is the current log file as it is from hijackthis:


I would appriciate the help.

 

[howard_hopkinso]

Hello and welcome to Techspot.

Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

R3 - Default URLSearchHook is missing

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

Click on the fix checked button.

Close HJT.

Go and read the Trojan Pakes and other nasties preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.


Regards Howard :wave: :wave:


This thread is for the use of odada only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[odada]

here's the current log files

I have attached the current logs you asked for.
I don't think there is a problem anymore, but I would be happy to hear what you have to say about it.

thanks for all the help,
odada

 

[howard_hopkinso]

Your HJT log is clean.

Assuming your system is running ok, I think we can say your problem is solved.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of odada only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[odada]

I had the lop.ah tojan horse pop-up again.
and the computer has been working quite slower lately.
what do you think could be the problem?

 

[howard_hopkinso]

Post a fresh HJT log and please give me the filepath to the trojan.

Regards Howard

This thread is for the use of odada only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[odada]

The Trojan that infected my comuter.

I sent you the log file I just made.

this is the path to the trojan:
C:\WINDOWS\pdsny1.dll

Trojan horse Lop.AH

I made a search for the file(after I checked "show hidden files and folders" in
the Tools => options => view tab), but I didn't find it.

what should I do?
In your opinion.

Thanks,
Odada

 

[howard_hopkinso]

Your HJT log is clean.

Download the Pocket Killbox programme from HERE.

Extract it to your desktop.

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html


Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.

This is the filepath you need to enter into Killbox.

C:\WINDOWS\pdsny1.dll<make sure this is the proper filepath to the trojan.

Once your system has rebooted, turn system restore back on and rehide your protected OS files.

Let me know the outcome please.

Regards Howard

This thread is for the use of odada only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.