Trojan horse dialer.28.A and COH

[jimjams]

Hi,
I'm having a serious problem with this trojan horse above,I have avg professional 7.5 and it keeps dectecting it but it keeps sending it to the virus vault but it keeps coming and the COH lets me heal it but again keeps coming.


I have attached my hijack this log file
And done lots of scans with avg and ewido(avg antispyware) adware and spybot but it doesn't find anything only smitfraud-c which i keep removing



Hope you can help thanks

 

[dahli]

Hello and welcome.

Please be sure that you have done ALL the steps here:

https://www.techspot.com/vb/topic50981.html

Then attach your Smitfraudfix log.

 

[jimjams]

Trojan Continued

Thanks this is my smitfraud fix log

SmitFraudFix v2.110

Scan done at 19:30:03.63, 18/10/2006
Run from C:\Documents and Settings\Philip\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philip


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Philip\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Philip\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End



hope this helps

 

[dahli]

PLEASE POST ALL LOGS AS ATTACHMENTS.

Go here and run a Bitdefender Online Scan

Save the log and attach it here along with a new HijackThis log.

 

[jimjams]

Sorry

Sorry but the online scanner doesn't won;t to work with my computer i install active x and then it says scanner can't load

i've attached my hijack this log anyway should i use a different online scanner

 

[dahli]

Are you able to install ActiveX? Your log does not show it installed.

 

[jimjams]

i tried the f-secure online scanner and it says i don't have sufficent rights to install active x but i am logged on as computer administrator

 

[dahli]

I did not ask anything about f-secure. You said you downloaded the active x after I asked you to run a bitdefender scan but your log does not show that.

Did you download the Active X control for Bitdefender? If not, what error did it give? If so, exactly what error does Bitdefender give you?

 

[jimjams]

STAGE 1 it said Service Pack 2 was detected on this computer.
Click on the information bar and select "Install ActiveX Control i clicked the information bar to install it STAGE 2 it said the linsencing info and i clicked install STAGE 3 it said scanner failed to load Service Pack 2 was detected on this computer.
Click on the information bar and select "Install ActiveX Control" and dats it

 

[dahli]

Let's try this:

Download Bitdefender 8

Update and run Bitdefender 8. Save the log and attach it in your next reply

 

[jimjams]

All went well it found a lot more things than avg so i think i will be changing av i've attached my log

 

[dahli]

Yes it did a good job. How is your system running now?

 

[jimjams]

Well i have switched my av to kaspersky and i have had no more problems since So thx for all your help

 

[dahli]

You are welcome - glad we were able to help.