General discussion

Locked

Troj_CIADOOR.AS lo_602429674.exe

By Casemaker ·
Hi,
Ihave a pc with WXP Pro. Norton and Trend detect a virus. Norton said it is in the winlogon.exe file. I try to use recovery console and delete the file and expand another copy using winlogon.ex_ off the install disk. It does not appear to del the original because when I look at properties it said created today at 12:30 even though I del it many times. How can I delete the system file winlogon.exe?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by HAL 9000 Moderator In reply to Troj_CIADOOR.AS lo_60242 ...

Try starting the system in Safe Mode by pressing the F8 key after the POST screen and instead of deleting the file rename it to a different File Extension and then copy the replacement file to the correct place.

If this fails to work you'll need to have a look on the Symantec Web Page to see if they have a tool to remove this infection with at

http://www.symantec.com/index.htm

Col

Collapse -

by Casemaker In reply to

Poster rated this answer.

Collapse -

by dmiles In reply to Troj_CIADOOR.AS lo_60242 ...

It seems that you could infected with a specific brand of bug called a browser hijacker. Anti-virus software won't find and delete them. Unfortunately regular sypware might not be as effective. There are many variantes of these bugs so I won't even go into details which one could be.

I've successfully treated some infected computers such as yours following these simple outlined steps.

Try downloading and running two freebie applications. First one is CWShredder that might solve your problem.

You can download it from here:

http://www.intermute.com/spysubtract/cwshredder_download.html

if you are still having the problem try the second one Hijackthis.

http://www.merijn.org/files/hijackthis.zip

Also, this tools are for removing the bug only. To keep yourself free from this pests you will nee to.

TO keep from being re-infected. You must do this:

1-) Keep your antivirus subscription renewed and the liveupdate running on a regular basis.

2-) Keep a Firewall I recommend Zone alarm it is very good and you can get a trial version for free.

3-)Use the free sypware tools like Microsoft defender beta version and Yahoo tool bar with anti-spyware.

4-) you might also try Ad-aware 6.0 it's also free and very effective.

Collapse -

by Casemaker In reply to

Poster rated this answer.

Collapse -

by Casemaker In reply to Troj_CIADOOR.AS lo_60242 ...

This question was closed by the author

Back to Desktop Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums