Jump to content

help needed removing trojan.BHO.H


Recommended Posts

MBAM unable to remove this trojan.

I reboot and it's still there. Please HELP ME.

Malwarebytes' Anti-Malware 1.44

Database version: 3825

Windows 6.0.6002 Service Pack 2

Internet Explorer 8.0.6001.18882

3/5/2010 7:23:58 PM

mbam-log-2010-03-05 (19-23-58).txt

Scan type: Quick Scan

Objects scanned: 115357

Time elapsed: 6 minute(s), 43 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Users\Pete\AppData\Local\Temp\low\COUPON~1.DLL (Trojan.BHO.H) -> Quarantined and deleted successfully.

Link to post
Share on other sites

Hello.. Lets do this first...

Please download CleanUp! by stevengould.org and save it to your Desktop.

  • Double-click CleanUp452.exe and install CleanUp! to your computer
  • Open CleanUp! and click on Options.. button.
  • Under General tab, choose Standard CleanUp! and then click Ok
  • Click on the CleanUp! button. When it asked you to logoff Windows, click on Yes
  • Let your Windows rebooted (or do it manually) and then scan again with Malwarebytes'.. Is it still there? :P

Link to post
Share on other sites

Hello.. Lets do this first...

Please download CleanUp! by stevengould.org and save it to your Desktop.

  • Double-click CleanUp452.exe and install CleanUp! to your computer
  • Open CleanUp! and click on Options.. button.
  • Under General tab, choose Standard CleanUp! and then click Ok
  • Click on the CleanUp! button. When it asked you to logoff Windows, click on Yes
  • Let your Windows rebooted (or do it manually) and then scan again with Malwarebytes'.. Is it still there? :)

Link to post
Share on other sites

Please make sure you disable ALL of your Antivirus/Antispyware/Firewall before running ComboFix.. Please visit HERE if you don't know how.. Please re-enable them back after performing all steps given..

Please download ComboFix by sUBs from HERE or HERE and save it to your Desktop.

During the download, rename Combofix to Combo-Fix as follows:

CF_download_FF.gif

CF_download_rename.gif

It is important you rename Combofix during the download, but not after.

**NOTE: If you are using Firefox, make sure that your download settings are as follows:

  • Tools->Options->Main tab
  • Set to "Always ask me where to Save the files".

After that, double-click and run Combo-Fix. Let it finish its job and post the log here

If ComboFix asked you to install Recovery Console, please do so.. It will be your best interest..

Note: DON'T do anything with your computer while ComboFix is running.. Let ComboFix finishes its job..

Link to post
Share on other sites

combofix appears to have removed my trojan. Programs and Features have an entry for 'Coupon Bar' which could not and cannot be uinstalled. Is that a problem?

Can you recommend an antispyware product?

Thanks so much for your help. I am really impressed. I will become a paying member.

Link to post
Share on other sites

combofix appears to have removed my trojan. Programs and Features have an entry for 'Coupon Bar' which could not and cannot be uinstalled. Is that a problem?

Can you recommend an antivirus product?

Thanks so much for your help. I am really impressed. I will become a paying member.

Link to post
Share on other sites

combofix appears to have removed my trojan. Programs and Features have an entry for 'Coupon Bar' which could not and cannot be uinstalled. Is that a problem?

Can you recommend an antispyware product?

Thanks so much for your help. I am really impressed. I will become a paying member.

can you post me the screenshot of it? :)

Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.