General discussion

Locked

Trojan Removal

By Gromett ·
I am trying to remove a Spyware Program called "Common Name". Apparently the program has become infected with the "Sinkin" and the "Downloader" Trojan according to Symantec, so that the program simply re-installs itself even though it has been removed using the instructions given in "add/remove programs". running a combination of Adaware and Spybot seems to clean it out in "safe mode", but upon rebooting and re-hooking up to the Internet, it just replicates itself all over again including putting the complete folder back into programs. Turning it off in Task Manager services is futile as both the "winnet.exe" and the "comwiz.exe" programs associated with Common Name just instantly re-start. The programs replicate themselves in the Temp Internet file in local folders along with another related program called "cnbabe4.exe". I seem to have one more problem related to this in that there are multiple identities on the computer. When accessing through "safe mode" the identity with the problem is not listed even though the identity is an administrator and not password protected. When I access through the Administrator identity, I still cannot get into the files associated with the identity having this problem.

Thanking you in advance for your help!

Gromett

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Trojan Removal

HijackThis can help. Go here to download it:
http://merijn.org/downloads.html
It will analyze your browser settings, and make it possible to remove Registry settings and such that trojans and spyware use to hook themselves into IE.
And a tutorial of what HijackThis is saying is here:
http://merijn.org/htlogtutorial.html

Very useful tool to have.

Collapse -

by Gromett In reply to

Poster rated this answer.

This answer helped the most. Using a combination of Ad-Aware, Spybot, & Hijack this while running in safemode, along with a few additional manual deletions finally got rid of the pests

Collapse -

by pierrejamme In reply to Trojan Removal

WOW downloader is brand new.
You need to disable system restore, see: http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm.
good Luck,
Peter

Collapse -

by pierrejamme In reply to

That is if you have XP and system restore enabled??

Collapse -

by Gromett In reply to

Poster rated this answer.

Good advice, but I already knew and did that

Collapse -

by wlbowers In reply to Trojan Removal

Go here and read.

http://www.spy-bot.net/CommonName.asp

remove spaces after copy and paste.

Lee

Collapse -

by Gromett In reply to

Poster rated this answer.

That was helful - I found similar posts, but this was more thorough. My problem, though was a step further in that the trojan had attached itself to 3 "Common Name" .exe programs that kept replicating themselves when you we-hooked to the Internet after cleaning everything out in safe mode. Using Hijack This after using Adaware & Spybot to remove all the files & objects in safe mode finally got rid of it.

Collapse -

by Gromett In reply to Trojan Removal

This question was closed by the author

Back to Software Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums