Discussion Locked

Trojan Removal

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to remove a Spyware Program called "Common Name". Apparently the program has become infected with the "Sinkin" and the "Downloader" Trojan according to Symantec, so that the program simply re-installs itself even though it has been removed using the instructions given in "add/remove programs". running a combination of Adaware and Spybot seems to clean it out in "safe mode", but upon rebooting and re-hooking up to the Internet, it just replicates itself all over again including putting the complete folder back into programs. Turning it off in Task Manager services is futile as both the "winnet.exe" and the "comwiz.exe" programs associated with Common Name just instantly re-start. The programs replicate themselves in the Temp Internet file in local folders along with another related program called "cnbabe4.exe". I seem to have one more problem related to this in that there are multiple identities on the computer. When accessing through "safe mode" the identity with the problem is not listed even though the identity is an administrator and not password protected. When I access through the Administrator identity, I still cannot get into the files associated with the identity having this problem.

Thanking you in advance for your help!

Gromett

8 replies

by gromett

Poster rated this answer.

This answer helped the most. Using a combination of Ad-Aware, Spybot, & Hijack this while running in safemode, along with a few additional manual deletions finally got rid of the pests

by gromett

Poster rated this answer.

That was helful - I found similar posts, but this was more thorough. My problem, though was a step further in that the trojan had attached itself to 3 "Common Name" .exe programs that kept replicating themselves when you we-hooked to the Internet after cleaning everything out in safe mode. Using Hijack This after using Adaware & Spybot to remove all the files & objects in safe mode finally got rid of it.

This discussion is closed to new replies.