how to remove a trojan?

Question

lately i got something on y computer.I have A icon blinking on the bottom of the computer by my clock.It is a red circle with a question mark in it. then a small window will pop up and read "Virus Alert. your computer is infected" when i click on it it takes you to the web page SpywareQuake http://www.spywarequake.com/?aff=247 .
I have ran sybot ,McAfree windows defender and yahoo anti-spy.and it doesn't remove it.How can i remove this and what is this???

Answer 1

Go to http://free.grisoft.com/doc/2/lng/us/tpl/v5 and download the free version of AVG anti-virus. It is an excellent program that provides free updates. A friend of mine had the same problem you have and this program fixed it.

Answer 2

2

Answer 3

Vundo is a operating laptop or computer virus that would damage your pc with the help of commencing huge protection backdoors and setting up rogue anti-secret agent ware courses. Trojan.Vundo generates faux positives attempting to trick consumers into paying for finished variations of time-honored rogue anti-secret agent ware application. This trojan can hijack browser homepage, create personal computer shortcuts, fix equipment settings. Vundo would reason customary equipment blunders and slowdowns. we promote to get rid of this malware out of your workstation.

Answer 4

Go into control panel ad into add/remove software. Make sure that spy ware quake or something similar is not installed. Run a virus scan and spy ware scan again. If you downloaded any toolbars, this might have came with it.

Answer 5

Take the computer to the computer store with you.Take your receipt.Call first.They did not warn you about virus when you purchased the computer.

Answer 6

to remove trojan just roll it down the shaft carefully

Answer 7

I am sending you an email with Detailed Instructions so please check your mail after

8 or 10 min.

Answer 8

I looked up Spyware Quake and it is more a spyware than a Trojan; however, a Trojan installs Spyware Quake. Spyware Warrior is lists this application as a rogue anti-spyware application. For more information about Spyware Quake, please refer to:

1. "Spyware Quake a Rogue Anti-spyware program" -- spware warrior.com ( http://www.spywareguide.com/product_show.php?id=2806)

For removal instructions, please refer to an article published on Sunbelt's Blog (Sunbelt is the maker of CounterSpy, a popular anti-spyware program).

2. "SpywareQuake Removal Instructions " -- sunbelt.com (http://www.sunbelt-software.com/spyware/SpywareQuakeRemoval.html)

You can also download CounterSpy for a free 15-day trial.

To save you some time, I have copied the steps to remove Spyware Quake below ( you might still want to use the link mentioned above #2 for readiability):

The following steps can be taken to successfully remove SpywareQuake from the infected machine:
Restart the computer and boot into Safe Mode. This can be done by continually pressing the F8 key as soon as the computer starts to boot up.
You will be presented with the "Windows Advanced Options" menu. Choose the option to boot into Safe Mode. Windows will boot up as normal. Choose "Yes" to continue working in Safe Mode.
Now, we are going to delete the offending files that are causing SpywareQuake to install/re-install. These files are also the files that cause pop-ups informing you that your machine is infected. The files that need to be deleted are located here:
C:\%WINDIR%\system32 (In some instance, your active drive might be a different drive letter (such as D: or E:) - In this case, simply replace the drive letters.

Note: %WINDIR% is used to represent the "Windows" directory.

For Windows 2000 systems %WINDIR% = C:\WINNT
For Windows XP systems %WINDIR% = C:\WINDOWS

You can browse to this folder either through the Windows explorer or by using the Windows command prompt (Click on Start, Run. Then, copy and paste the text above (%WINDIR%\system32) into the box. Now, we will need to locate and delete or rename the following files IF PRESENT:


%WINDIR%\System32\nvctrl.exe - DELETE
%WINDIR%\System32\dfrgsrv.exe - DELETE
%WINDIR%\System32\mssearchnet.exe - DELETE
%WINDIR%\System32\atmclk.exe - DELETE
%WINDIR%\System32\regperf.exe - DELETE
%WINDIR%\System32\dcomcfg.exe - DELETE
%WINDIR%\System32\simpole.tlb - DELETE
%WINDIR%\System32\stdole3.tlb- DELETE
%WINDIR%\System32\stickrep.dll - RENAME to stickrep.dll.Delete
%WINDIR%\System32\suprox.dll - RENAME to suprox.dll.Delete
%WINDIR%\System32\xenadot.dll - RENAME to xenadot.dll.Delete
%WINDIR%\System32\sivudro.dll - RENAME to sivudro.dll.Delete
%WINDIR%\System32\twain32.dll - RENAME to twain32.dll.Delete
%WINDIR%\System32\reglogs.dll - RENAME to reglogs.dll.Delete
%WINDIR%\System32\appmagr.dll - RENAME to appmagr.dll.Delete
%WINDIR%\System32\clsemixer.dll - RENAME to clsemixer.dll.Delete
%WINDIR%\System32\ulztc.dll - RENAME to ulztc.dll.Delete
%WINDIR%\System32\wfkduei.dll - RENAME to wfkduei.dll.Delete
%WINDIR%\System32\iqzv.dll - RENAME to iqzv.dll.Delete
%WINDIR%\System32\imfdfcj.dll - RENAME to imfdfcj.dll.Delete
%WINDIR%\System32\vhywj.dll - RENAME to vhywj.dll.Delete
%WINDIR%\System32\guxxa.dll - RENAME to guxxa.dll.Delete
%WINDIR%\System32\acvgxw.dll - RENAME to acvgxw.dll.Delete
%WINDIR%\System32\rmzdzx.dll - RENAME to rmzdzx.dll.Delete
%WINDIR%\System32\hvcycg.dll - RENAME to hvcycg.dll.Delete
%WINDIR%\System32\vpxnk.dll - RENAME to vpxnk.dll.Delete
%WINDIR%\System32\mzoeut.dll - RENAME to mzoeut.dll.Delete

SpywareQuake will still be present on the system. You can now remove it by going to the Add/Remove programs module in the Windows Control Panel.

Restart the system. SpywareQuake should now be removed from your system.

Now, navigate back to the System32 folder and delete any of the file(s) that we had renamed earlier:


%WINDIR%\System32\stickrep.dll.Delete
%WINDIR%\System32\suprox.dll.Delete
%WINDIR%\System32\xenadot.dll.Delete
%WINDIR%\System32\sivudro.dll.Delete
%WINDIR%\System32\twain32.dll.Delete
%WINDIR%\System32\reglogs.dll.Delete
%WINDIR%\System32\appmagr.dll.Delete
%WINDIR%\System32\clsemixer.dll.Delete
%WINDIR%\System32\ulztc.dll.Delete
%WINDIR%\System32\wfkduei.dll.Delete
%WINDIR%\System32\iqzv.dll.Delete
%WINDIR%\System32\imfdfcj.dll.Delete
%WINDIR%\System32\vhywj.dll.Delete
%WINDIR%\System32\guxxa.dll.Delete
%WINDIR%\System32\acvgxw.dll.Delete
%WINDIR%\System32\rmzdzx.dll.Delete
%WINDIR%\System32\hvcycg.dll.Delete
%WINDIR%\System32\vpxnk.dll.Delete
%WINDIR%\System32\mzoeut.dll.Delete

Note: The un-installer provided with SpywareQuake does not completely remove all traces of itself. You can remove the remainder by manually deleting the SpywareQuake or SpywareQuake.com folder in C:\Program Files (newer variants of SpywareQuake use the SpywareQuake.com directory in Program Files) or by performing a full system scan with CounterSpy:

C:\Program Files\SpywareQuake

C:\Program Files\SpywareQuake.com

C:\Program Files\SpyQuake2.com