Trojan-backdoor-coworg i need help

[stuveltje]

Originally Posted by babymaker

did u try and delete the jpicache folder they hide all kinds of nasty stuff in there and it is not needed, you can kill it use windowasher and shred and wash with bleach it might help!

well i restored the bad files that way, i could check where they where, the trojan i have is removed by spysweeper but its is getting back, worse is that trojan is on the root of the puter, so i have to be carefull with what i removed, in hijjack this, it wont show, i have to look in run. cmd, regedit.....dohhhh i have to be carefull with what i remove, i did remove my viruscanner, because it looked the trojan was in there in one of the files, that could explain why my viruscanner didnt show up when i start the puter, in google i only find 5 or 7 postings abut this one, but i hav some help again from a dutch board....grin i am driving them crazy already for 3 weeks, but they still try to help me........i love those guys

[Mutant]

Originally Posted by stuveltje

3 weeks

OK this almost makes me consider letting it infect my comp to check if i can remove it in less than 2 hours.
My aunt calls me for help everytime her machine gets a trojan/browser hijacker and i always deal with it at a distance this way:
1. I let it infect one of my bootable hdds (i have 3 in my computer now, the other 2 disconnected physically to protect important data).
2. I make a screenshot of every step needed to cure the infection.
3. After everything is clean again my aunt gets an email with a nice illustrated step by step trojan removal procedure.

[kitty_kate]

stuveltje, I still think you should post a HijackThis! log if you want help, otherwise all you will get will be "guess you should do this or that".

[stuveltje]

Originally Posted by kitty_kate

stuveltje, I still think you should post a HijackThis! log if you want help, otherwise all you will get will be "guess you should do this or that".

yes i will put a hyjack thing up, we did remove and fixed alot of things in those 3 weeks, my moron hubby had only 7 kind of trojans in his puter, only the trojan backdoor coworg is bugging the puter now, but it will only show up if i put on the system restore button, i have checked google, norton sees it and it say it removes it, but next time it will be in the puter again, i will also put up the spysweeper log, because that one sees it also and shw where it is all the time, its somewhere in the root of the puter. i will post tomorrow the hijack thing and all.

[Mutant]

Originally Posted by stuveltje

but it will only show up if i put on the system restore button

Turn off system restore for all drives.
Manually delete everything in c:\System Volume Information\ (iirc you may have to boot in safe mode to do that)
[edit]Just deleted all snapshots manually in Total Commander in protected mode without any trouble.[/edit]

and...

presto ! all your troubles are gone !

[stuveltje]

Originally Posted by Mutant

Turn off system restore for all drives.
Manually delete everything in c:\System Volume Information\ (iirc you may have to boot in safe mode to do that)
[edit]Just deleted all snapshots manually in Total Commander in protected mode without any trouble.[/edit]

and...

presto ! all your troubles are gone !

Na i did it otherwise now, what i didnt check was: if the scan system restore was clicked at spysweeper, so everytime spysweeper saw the sucker but couldnt remove it, now what i did was: go in save mode: left the system restore on, run spysweeper with ofcourse the scan system restore on. So spysweeper could remove it now, that way i could connect the net with firefox but now with ie, now i have reinstal internet explore thru the disk , restarted and all is working again, yeahhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh i mnaged after so mnay weeks, and i didnt have to whip all out and reinstal again, Stu <----shking her booty here

[MrYum]

Originally Posted by stuveltje

Na i did it otherwise now, what i didnt check was: if the scan system restore was clicked at spysweeper, so everytime spysweeper saw the sucker but couldnt remove it, now what i did was: go in save mode: left the system restore on, run spysweeper with ofcourse the scan system restore on. So spysweeper could remove it now, that way i could connect the net with firefox but now with ie, now i have reinstal internet explore thru the disk , restarted and all is working again, yeahhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhh i mnaged after so mnay weeks, and i didnt have to whip all out and reinstal again, Stu <----shking her booty here

Congrats Stu

You are a tenacious one

I would have thrown in the towel and re-installed long ago.

[stuveltje]

Originally Posted by MrYum

Congrats Stu

You are a tenacious one

I would have thrown in the towel and re-installed long ago.

well normal i would do the same, i would have thrown the damn thing thru the window the same day, but its shows when you get older you also gonna be more patience (if thats the word) and since i manage to deal with it almost 4 weeks........it means i am already very old |shocking| but i have learned alot about the programs in the puter