Comments for Why can't this trojan be removed?

Comment from Alan on 2009-07-17

2009-07-17T13:29:39Z

Has the user tried the program "Malwarebytes"? its a free malware remover. to me its one the best programs that out there on the market. but you can use the free version but you have to run it manually. your AV program only does so much but the malware remover programs do much more. Users should not relie on windows defender it does nothing on your system. To me its just a lameduck program. Main thing usally if you got a nasty virus on your system your best case is to rebuild the system. Some people say that the last way out but it is the only way for the user to gain control of their systems. But first try the "Malware bytes" program first there may be other malware hidden under this program.

]]>

A comment on: Why can't this trojan be removed?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from JH on 2009-07-14

2009-07-14T20:59:23Z

You may need to boot into the recovery console first otherwise the file will probably be in use if its system.

]]>

A comment on: Why can't this trojan be removed?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Dave Markley on 2009-07-14

2009-07-14T19:26:47Z

I have a suggestion that may help if it will work, but I haven't needed to try it (yet). If you know someone who has the identical version of Windows (not just XP, or Vista, or whatever but the same service packs, build code etc.) copy the file from their PC (I'm also using 'svchost.exe' for an example) onto a flash drive. Then copy it into your computer. You'll be asked whether or not to 'overwrite' the existing file - click 'yes'. In theory this should 'overwrite' (delete) your 'infected' svchost.exe file and replace it with the original, undamaged one. Just make sure to create a 'restore point' first. Good luck!

]]>

A comment on: Why can't this trojan be removed?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from howiem on 2009-07-14

2009-07-14T16:30:06Z

A web search for the trojan indicated it can be fixed http://freeforum.avg.com/read.php?4,178474,178797, http://freeforum.avg.com/read.php?4,180496,180496#msg-180496,

I'd also recommend that the user get Hijackthis from trend Micro, run a scan and create a log file and post it on a Hijackthis Forum for assistance.

]]>

A comment on: Why can't this trojan be removed?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from DSU on 2009-07-09

2009-07-09T17:05:27Z

One thing I want to point out. I have never had anything marked "Trojan horse Downloader.Generic8.ABKH" or the like be anything other then a false positive. When this happens upload the file to a service like http://virscan.org/ to see if any other virus scanners agree. This is especially critical if it is a system file. "Generic" means is not in the database but appears to be virus. Since few of us get the real cutting edge malware it is the worth the time to check.

]]>

A comment on: Why can't this trojan be removed?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.