I have run an anti spyware scan and my virus software (AVG) has informed me that i have a 'Trojan horse crypt.qco'. It says that this file has infected my 'C:\WINDOWS\System32\userinit.exe' file and that it cant be removed.
Any ideas? i have searched the internet but not found anything to do with this type of trojan horse.
Step 2: After running the Rescue Disk, Reboot to Windows:
Download and install CCleaner Now run Ccleaner with the default options (that means don?t change anything) to clean out temporary files.
Only use the default settings on the Windows Tab and select Run Cleaner. Do not run any other options from other tabs.
Also it is highly recommended to login to all other User Accounts on the PC.
Run CCleaner on each account. This can greatly reduce scan time and log sizes from the later scanning you will do below.
If you don?t see Ccleaner?s link when logging into the other accounts, just go to the C:\Program Files\Ccleaner folder and double click on the ccleaner.exe file to run it. You can also create a shortcut to the file on the Desktop of your other user accounts to make it easier to run in the future
Step 3: Uninstall Known Malware and Unwanted Software
Work thru the below link to uninstall any bad programs that should not be installed on your PC. This may in some instances even resolve your problems. It takes a small amount of time (based on your experience level) to do this comparison, but it is well worth the effort.
Step 5: Installing, Configuring and Running the Scans
Follow the instructions to run SUPERAntiSpyware HERE Next
Follow these instructions to run MalwareBytes AntiMalware HERE
If you?re still having problems then:
Download HJTInstall.exe to your Desktop.
Doubleclick HJTInstall.exe to install it.
By default it will install to C:\Program Files\Trend Micro\HijackThis.
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
The log will be saved as HijackThis.log in the C:\Program Files\Trend Micro\HijackThis folder.
Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
Please copy and paste this Log and the Logs from SAS and MBAM in your next reply and explain, as best you can, what problems you are having?.. Thanks.
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
This message has been edited since posting. Last time this message was edited on 19. March 2010 @ 08:30
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves...
This message has been edited since posting. Last time this message was edited on 19. March 2010 @ 08:36
