TechSpot

Troya NetBus, Driving me Crazy!!!!

By EsTeBaNo
Jul 20, 2006
  1. This thing has been trying to enter my computer but Norton keeps blocking it.
    I dont know how to avoid this crap from trying to enter my pc, i already deleted and reinstalled the full OS and im still having the same problem... How i repair this?? Troya Netbus keeps trying to enter my pc and Norton Blocking it... Driving me insane...I been having some problems with Backdoors trying to acces my pc wich are blocked by norton firewall too!
    Please ! i would appreciate any help!
    Thank you!!!
     

    Attached Files:

  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    That is not a full HJT log.

    Go HERE and follow the instructions exactly.

    Post a fresh HJT log into this thread, only after doing the above.

    Regards Howard :)
     
  3. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Here it is!
    Sorry!
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

    Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

    Click on the processes tab and end process for(if there).

    ALCMTR.EXE

    Close task manager.

    Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O3 - Toolbar: Vista de HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Archivos de programa\HP\Digital Imaging\bin\HPDTLK02.dll

    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

    O16 - DPF: {02AA9E0F-B4EB-4BE9-A769-FD09543FEEC2} (UniInstaller Class) - http://webcamnow.com/fs5/voice/voice-installer.cab

    O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqlar/downloads/sysinfo.cab

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    ALCMTR.EXE You will need to search your system for this file and delete all instances of it.

    Other than the above, your HJT log is clean.

    Regards Howard :)
     
  5. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Hmm But i dont think ALCMTR.EXE is dangerous ... Its a Realtek Process and my Sound card is a realtek
     
  6. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Heh Checked on google...
    RealTek ac97 Audio Driver software Spyware... Odd... Ill delete it!
    Thank you very Much!!
     
  7. korrupt

    korrupt TS Rookie Posts: 716

    As you must know, the best solution is to Prefent spyware and other malware from entering the pc in the first place. Go HERE for how to.

    Regards,

    Korrupt
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    ALCMTR.EXE is classified as spyware. This is because it collects and transmits information about your system to a third party. It is recommended to get rid of it.

    It won`t affect your Realtek sound card at all.

    Regards Howard :)
     
  9. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Wow it works Great, I havent been bothered by that thing, btw ALCMWZRD.EXE Was acting weird giving error messages and i deleted too!
    That must be illegal, you cant even download a driver or you will be in danger of downloading a trojan.
    Thanks a lot for the help!!!
     
  10. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Hmm :( Still bothering me but this time not soo much ...
     
  11. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    What`s still bothering you?

    Please try to be as specific as you can.

    Regards Howard :)
     
  12. jobeard

    jobeard TS Ambassador Posts: 9,322   +622

    that's exactly what you want Norton to do -- BLOCK it.
    what you need to do is to alter the notification to cause a log entry only.
    no pop-up warnings will be seen thereafter :)
     
  13. EsTeBaNo

    EsTeBaNo TS Rookie Topic Starter Posts: 84

    Okay Im Gonna try it, Thank a lot again!
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...