Troya NetBus, Driving me Crazy!!!!

Status
Not open for further replies.

EsTeBaNo

Posts: 84   +0
This thing has been trying to enter my computer but Norton keeps blocking it.
I dont know how to avoid this crap from trying to enter my pc, I already deleted and reinstalled the full OS and im still having the same problem... How I repair this?? Troya Netbus keeps trying to enter my pc and Norton Blocking it... Driving me insane...I been having some problems with Backdoors trying to acces my pc wich are blocked by norton firewall too!
Please ! I would appreciate any help!
Thank you!!!
 

Attachments

  • hijackthis.txt
    3.5 KB · Views: 6
That is not a full HJT log.

Go HERE and follow the instructions exactly.

Post a fresh HJT log into this thread, only after doing the above.

Regards Howard :)
 
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.


Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ALCMTR.EXE

Close task manager.

Run HJT with no other programmes open(except notepad).Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O3 - Toolbar: Vista de HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Archivos de programa\HP\Digital Imaging\bin\HPDTLK02.dll

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O16 - DPF: {02AA9E0F-B4EB-4BE9-A769-FD09543FEEC2} (UniInstaller Class) - http://webcamnow.com/fs5/voice/voice-installer.cab

O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqlar/downloads/sysinfo.cab

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

ALCMTR.EXE You will need to search your system for this file and delete all instances of it.

Other than the above, your HJT log is clean.

Regards Howard :)
 
Hmm But i dont think ALCMTR.EXE is dangerous ... Its a Realtek Process and my Sound card is a realtek
 
Heh Checked on google...
RealTek ac97 Audio Driver software Spyware... Odd... Ill delete it!
Thank you very Much!!
 
As you must know, the best solution is to Prefent spyware and other malware from entering the pc in the first place. Go HERE for how to.

Regards,

Korrupt
 
ALCMTR.EXE is classified as spyware. This is because it collects and transmits information about your system to a third party. It is recommended to get rid of it.

It won`t affect your Realtek sound card at all.

Regards Howard :)
 
Wow it works Great, I havent been bothered by that thing, btw ALCMWZRD.EXE Was acting weird giving error messages and i deleted too!
That must be illegal, you cant even download a driver or you will be in danger of downloading a trojan.
Thanks a lot for the help!!!
 
EsTeBaNo said:
Troya Netbus keeps trying to enter my pc and Norton Blocking it... Driving me insane...
that's exactly what you want Norton to do -- BLOCK it.
what you need to do is to alter the notification to cause a log entry only.
no pop-up warnings will be seen thereafter :)
 
Status
Not open for further replies.
Back