Trojan Horse Generic 13.BWN

By LKS
Mar 19, 2009
Topic Status:
Not open for further replies.
  1. Hi hi, my computer recently being attacked by Trojan Horse Generic 13.BWN.
    I had done the 8 Steps Viruses Preliminary Removal Instructions.
    Here are the required log file. Can help me to check whether my pc is Clean.
    Thank you very much
  2. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Run the Norton Removal Tool: ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
    (Seeming Norton Internet Security is still running!)

    Uninstall your AVG Antivirus
    Then run the removal tool
    Here is the 32Bit version (most users): http://www.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe
    Here is the 64Bit version: http://www.avg.com/filedir/util/avg_arv_sup_____.dir/avgremoverx64.exe

    Restart

    Install Avira free AntiVirus

    Combofix Instructions

    • Download [​IMG]Combofix to your desktop.
    • Double click Combofix & follow the prompts.
    • A window will open with a warning.
    • When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.
    Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction

    Combofix will automatically save the log file to C:\combofix.txt
    Also attach a fresh HiJackThis scan ran afterwards
  3. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    I Tried to run the Norton Removal, but a prompt up said that the file is corrupted. so what should i do now?
  4. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

  5. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    Hi hi, i had done all instructions, here are the combofix and hijack file
  6. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Actually a difficult one as there are many startups to sort through

    Please open HJT Scan only, and place a tick in the checkboxes along side the following entries:
    Close all Internet browsers then select FIX
    Also go to Add\Remove Programs and remove:
    Ad-Aware (some wasted startups happening)
    FlashGet (this is a must, as I have asked you to remove two entries above)
    BitComet (seeming this is where the infections have come from)

    Then run IE Reset. INFO HERE

    You may want to turn off some not needed Windows Startups too. INFO HERE

    Run the Norton Removal tool (as you have Symantec starting too, trying to update!)

    Then Restart

    Then run ComboFix again (pretty sure all aint gone yet :(
    Also submit the log again, plus a new HJT scan log
  7. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    I had done all the instructions ,here are new log files
  8. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Hmm

    Did IE Reset get done?
    Also Norton Removal Tool?

    Also BitComet is still listed in ComboFix log, if you uninstalled it already, please go to:
    Start-> Run-> %programfiles% ->ok
    Locate BitComet, and right click on it and delete it.
  9. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    I had done all now. What should i do now?
  10. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    I really need the logs to confirm BitComet is gone. As there is no use continuing with File Sharing programs installed. ie re-infection is imminent.

    Anyway, just do this: (as long as all what I said above is completed, ie I don't like long threads, and intend not to make this one drag out either)

    Please download and run SDFix (I'm sorry, but I must refer you to t h i s tutorial on its use, scroll down to "SDFix Instructions")

    Download, and run the "RunThis.bat" in Safe Mode, as advised
    Then attach the log and (after the SDFix scan) a new HJT log
    Oh by the way, it says that it may take 20mins to scan! (Mine took over an hour to complete!)
  11. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    Hi hi, here are the files.
    Thanks a lot.
     
  12. LKS

    LKS Newcomer, in training Topic Starter Posts: 22

    May i know is it my pc is alright?
  13. kimsland

    kimsland Ex-TechSpotter Posts: 18,353

    Due to time restraints I have stopped my support on Virus & Malware removal
    I apologize for the inconvenience, basically TechSpot has become busier and Virus & Malware takes a large amount of my time to support.

    If you do not receive any further replies on this thread by other support members, please create a New Thread
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.