Ciadoor in Windows Vista

[SmaShT]

I've been reading a few threads in this great board, and it seems other people had the same problem as me.

Everytime I turn on my PC, I get the error message saying that svchost.exe cannot be found. In addition, the trojan modified my registry keys which prohibit me from using the Task Manager and some other of the basic Windows tools.

I run Ad-aware, and it tells me that I have the Ciadoor trojan, which is then easily removed, except for the fact that it comes back every time I reboot the system.

I attached the HJT file, hopefully this will make things clear.

Thanks in advance!

 

[tomrca]

hi smasht. welcome to techspot.
you have quite a lot of bogie's in your hjt log.
go to this link first. https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/ . you must also change the name of hijack this, C:\Program Files (x86)\HJT\HijackThis.exe to C:\Program Files (x86)\HJT\analyser1991.exe . it is important that you do this as there are bugs that hide from it. once you have completed the instructions, post a fresh hjt log and an AVG (anti-spy-ware log)log too.

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your system is infected with several nasties. It also appears you`re not running any antivirus or firewall software.

Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

If after reading the above, you wish to clean your system, do the following.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT, Combofix and AVG Antispyware logs as attachments into this thread, only after doing the above.

Regards Howard :wave: :wave:

This thread is for the use of SmaShT only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[SmaShT]

Thanks for the replies. I did as suggested, and now I no longer get that annoying 'scvhost.exe missing' error, and everything seems to be working fine. Kaspersky AntiVirus does not report any contaminated files and neither does ad-aware.

I'm gonna post the new HJT file and hopefully all those annoying worms are finally gone for good!

Thanks again for the help.

 

[howard_hopkinso]

I can see nothing nasty in your HJT log. However, since you`re running Windows Vista, I can`t be 100% sure. That`s because there`s no info foe some of the files/entries in your HJT log.

I did request that you post Combofix and AVG Antispyware logs. Please do so, if you can.

Regards Howard

This thread is for the use of SmaShT only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.