Can't Get Rid Of Trojan Horse

J1234 · 6 Apr 2010 at 19:35

A family member's PC had a weird virus that I've removed, but it has left behind a trojan horse that won't go away. It only shows up when I scan with AVG:

Nothing else picks it up; Malwarebytes, Avast and Spybot Search & Destory (all run in safe mode) don't find it. I ran HijackThis and the log showed nothing out of the ordinary (using the online analyser).

Googling shows others with the same problem, but I can't find a fix for it.

Any ideas?

Raumarik · 6 Apr 2010 at 20:05

False positive would be my thoughts if MWB etc don't pick it up at all.

arc@css · 6 Apr 2010 at 20:16

Have you tried Ad-aware? That, I find usually does a good job.

bledd · 6 Apr 2010 at 20:20

Try nod32 or kaspersky

Pho · 6 Apr 2010 at 20:47

If the file is reasonably small upload it to VirusTotal and see what it says.

teaboy5 · 6 Apr 2010 at 22:15

Justin said:
A family member's PC had a weird virus that I've removed, but it has left behind a trojan horse that won't go away. It only shows up when I scan with AVG:

Nothing else picks it up; Malwarebytes, Avast and Spybot Search & Destory (all run in safe mode) don't find it. I ran HijackThis and the log showed nothing out of the ordinary (using the online analyser).

Googling shows others with the same problem, but I can't find a fix for it.

Any ideas?

Try this

http://www.gmer.net/

_TubbZ_ · 6 Apr 2010 at 22:39

I always found AVG gave me a lot of false positives when i used it and in the end went to Avast! I guess i am now either blissfully ignorant of AVG was a bit too keen!

Temi_D · 6 Apr 2010 at 22:44

How about windows security essentials?

hyperst · 6 Apr 2010 at 22:59

or enable hidden files and folders and go to the path and try to manually delete it, if possible, works with that stupid one on the net that trys to scan your system and then makes you pay to remove its crap

Puppetmaster · 6 Apr 2010 at 23:16

try a squared i find that to pick up quite a few things others dont.

MikeHunt79 · 6 Apr 2010 at 23:57

housecall or clamwin is worth a go

Lynx24 · 7 Apr 2010 at 14:28

Malwarebytes sould do the trick

Mikoyan · 7 Apr 2010 at 15:21

Always switch off system restore before running scans I find a lot of entries stay within system restore. (obviously turn it back on after)

Smit · 7 Apr 2010 at 16:02

Lynx24 said:
Malwarebytes sould do the trick

OP already says he has tried this and it didn't pick up anything

Azuse05 · 7 Apr 2010 at 16:07

Format :/

Lynx24 · 7 Apr 2010 at 16:57

Smit said:
OP already says he has tried this and it didn't pick up anything

My bad, sorry

SB118 · 7 Apr 2010 at 18:40

F-Secure online scanner is nice.

SinaiSound · 7 Apr 2010 at 22:26

I've always had good results with combofix, that might work?

.one. · 7 Apr 2010 at 23:22

Hefner said:
I've always had good results with combofix, that might work?

The daddy

thedoc46 · 8 Apr 2010 at 17:16

personally i'd reformat. nowadays i keep a clean fresh built image. If i ever get an infection, i am not going to fully trust any av.. i'll just re-store and run the latest updates again.