trojan found

[green777]

Sorry if this is in the wrong category,

I have just started to get adverts poping up all the time, I run my spyware doctor 5.5 with virus and found i have a trojan called conhook, it cleans it but as soon as i go to any internet sites the adverts come back, i run the spyware doctor again and its back conhook trojan. Should i do a safe boot and reinstall my spyware doctor to try and clean it or do i need another remover, the spyware doctor says it can remove it? any help
Thanks,
peter

[Joe Forster/STA]

Have a resident malware scanner/cleaner (e.g. NOD32) running all the time. And stop using M$IE; use Opera or FireFox instead.

[green777]

Hi,
Thanks for your reply, where can i get a decent malaware remover from ?

[Joe Forster/STA]

See the PC Games forum FAQ for the three virus scanners we recommend.

[DABhand]

Sounds like possibly your Internet Explorer has been hijacked.

Like Joe said get some form of an AV installed.

And warning to others, dont believe in some things that popup on you, like free virus scanners etc. And that totally useless Winzip like program floating about, which is actually a malware,spyware and virii installer all in one.

[Softix]

You can used this one to remove the virus conhok

Adware-Virtumundo Removal Tool v1.2 (Associated with WinFixer Popups)

Note: This tool does not remove the WinFixer application. WinFixer alone does not cause popups or disrupt the system. If WinFixer was installed on your system because Adware or a Trojan Downloader installed it without your permission, please remove it using the Add/Remove Programs Control Panel Applet.

If Virtumundo is not found, the tool will exit showing the log file.
If Virtumundo is found it will do the following:
Version 1.1
Create a Date/Time Stamped log file (VBG.TXT) on the All Users profile's Desktop.
Kill Internet Explorer and Explorer processes.
Rename the infected files with a .Vir extension (this is disable them from being run)
Remove the Browser Helper Object registry key
Adds a registry value to block file from running in Internet Explorer again.
Remove the Winlogon Notify registry key
Automatically restart the computer (via STOP error)
Note: This is a BLUE SCREEN "Fatal Error" Message. It is normal and expected. The tool ends an important Windows Process that was protecting the file and NT Security STOPS the system as soon as it detects this is happening.

Version 1.2
Removed the instruction to Stop McShield
Cleaned up some logging messages.
Added checking for BHO with no default name. These entries will be checked to see if they are referenced to be start up with WinLogon. If it is, it will be tagged as Virtumundo and removed.

VirusScan will now be able to remove the files normally when you run an on-demand scan.

Download Link -> http://secured2k.home.comcast.net/to...undoBeGone.exe

[acal3000]

Originally Posted by Softix

You can used this one to remove the virus conhok

Adware-Virtumundo Removal Tool v1.2 (Associated with WinFixer Popups)

Note: This tool does not remove the WinFixer application. WinFixer alone does not cause popups or disrupt the system. If WinFixer was installed on your system because Adware or a Trojan Downloader installed it without your permission, please remove it using the Add/Remove Programs Control Panel Applet.

If Virtumundo is not found, the tool will exit showing the log file.
If Virtumundo is found it will do the following:
Version 1.1
Create a Date/Time Stamped log file (VBG.TXT) on the All Users profile's Desktop.
Kill Internet Explorer and Explorer processes.
Rename the infected files with a .Vir extension (this is disable them from being run)
Remove the Browser Helper Object registry key
Adds a registry value to block file from running in Internet Explorer again.
Remove the Winlogon Notify registry key
Automatically restart the computer (via STOP error)
Note: This is a BLUE SCREEN "Fatal Error" Message. It is normal and expected. The tool ends an important Windows Process that was protecting the file and NT Security STOPS the system as soon as it detects this is happening.

Version 1.2
Removed the instruction to Stop McShield
Cleaned up some logging messages.
Added checking for BHO with no default name. These entries will be checked to see if they are referenced to be start up with WinLogon. If it is, it will be tagged as Virtumundo and removed.

VirusScan will now be able to remove the files normally when you run an on-demand scan.

Download Link -> http://secured2k.home.comcast.net/to...undoBeGone.exe

Man that winfixer crapola is horrible i removed from brother 's pc some years back i could but the Winbloze he had got vey unstable even with the winfixer and all spyware junk removed and he had to format it anyways

gain (previously gator is also disgusting) you try to uninstall it it and your are forced to remove the porgram that installed it too. I don't know if that gain crap is still floating around

[BarryB]

Try SmitFraudFix:

http://siri.geekstogo.com/SmitfraudFix.php

Removes quite a few malware/spyware apps!

[rookers]

start your computer and in safe mode then run your antivirus program to clean yourself and be more careful next time