trojan.spy.win32@mx

attyalong · Post time 11-7-2007 04:10 PM

tolong..camner nak buat nie..
dtg jer keje..tgk dah ade menda nie..

Mehacomp_91 · Post time 11-7-2007 05:00 PM

Trojan-Spy.Win32@mx procedures requires technical know-how on  computer troubleshooting. It is better to consult your LAN Administrator or Technical Persons to avoid additional damage on your computer if modifications on Services and Registry have to be done.

MANUAL REMOVAL:

1. Temporarily disable System Restore (Windows Me/XP). [how to]

2. Download Free AVG or AVIRA(http://freeav.com/) AntiVirus and save it to a desired location. It is your choice if you want to retain this software or remove it after the cleaning process.

3. After downloading, browse where the file was saved and double click to install it.

4. After installation, connect to internet and download all necessary updates.

5. Download SmitfraudFix (http://www.precisesecurity.com/b ... ud-removal-by-siri/) and save it to a desired location. Please print the procedure as we have to close browser later.

6. Reboot your computer in SafeMode [how to]

7. Run AV and do a thorough scan. Delete all infected files.

8. Close AV and other open Applications.

9. Run and follow the SmitfraudFix procedure you have printed earlier.

10. You may now reboot in normal mode if it does not reboot automatically.

11. After reboot, download and scan with CCleaner (Standard Build Only).

Additional Clean-Up (If Present Only):

1. Go to Control Panel>Add/Remove programs

2. Uninstall the following
- Seekmo Toolbar or just Seekmo
- AWS or Weatherbug

3. Close Add/Remove Programs after successful removal.

4. Download and Run HiJackThis.http://www.spywareinfo.com/~merijn/programs.php (Close any running applications)
5. Mark the following entries:
- O3 - Toolbar: Seekmo Toolbar - {53E0B6E8-A51D-448B-B692-40B67B285543} - C:\Program Files\Seekmo Programs\Seekmo Toolbar\SeekmoTB.dll
- O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
- O11 - Options group: [INTERNATIONAL] International*

6. Select the option Fix checked to fix the problem. If prompts to reboot select No.

7. Close HiJackThis
8. Find and delete the following Directories:
- C:\Program Files\Seekmo Programs
- C:\Program Files\AWS

9. In order to make sure that Trojan-Spy.Win32@mx is completely eliminated from your computer, carry out a full scan of your computer using Online Virus Scanner. Scan at least on three different scanners.

Antara online scanner yang direkemenkan:
Symantec Security Check
TrendMicro          Housecall
BitDefender Online Scanner
amik kaspersky online scanner
http://www.kaspersky.com/virusscanner

[ Last edited by  Mehacomp_91 at 11-7-2007 05:12 PM ]