February 14, 2012, 10:05:20 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: SMF - Just Installed!
 
   Home   Help Search Login Register  

Win32.exe removal HELP PLEASE


AddThis Social Bookmark Button AddThis Feed Button
Pages: [1]
  Print  
Author Topic: Win32.exe removal HELP PLEASE  (Read 3429 times)
SoulBreaker
Newbie
*
Posts: 3


View Profile
« on: January 19, 2010, 10:50:09 AM »

Someone help. Ive been trying to remove this darn trojan for about a week and it hasnt been picked up by SpybotS&D, SUPERAnitSpyware, Malwarebyte's, Spyware doctor, & SpywareBlaster.
It WAS picked up by norton antivirus, and NOD32. Neither of the programs have been able to or even had an option to destroy/remove the trojan.

I got this trojan completely by accident. It infected my USB stick and now i think i have to wipe that...and i really dont want to reformat my HDD and OS(only as a last resort). I've been trying to get it off myself, and before I wipe my comp or send it to a professional comp guru/best buy/etc. I want to see if a person with ANY help can help me get out of this mess. you can reach me at Narikilan@gmail.com anytime.

 Also, this trojan can steal passwords right? I have steam(Reluctantly, just to play games javascript:emoticon(':oops:')) and i log into gmail alot...so I just dont want to get my password or accounts stolen. PLEASE HELP ASAP! javascript:emoticon(':cry:')
Logged
rodi
Administrator
Newbie
*****
Posts: 245


View Profile
« Reply #1 on: January 20, 2010, 07:31:38 AM »

Hello,

Most likely it's the Backdoor.Ratega. It's a Trojan Horse that gives a hacker complete access to your computer. By default, the Trojan listens on port 6969 and notifies the hacker through email. It doesn't steal passwords by itself, but a hacker can.

It copies itself as %System%\WIN32.EXE.
Creates the files:

    * %System%\Keylog.text
    * %System%\Zlib.dll
    * %WinDir%\Win32.dll

Adds the registry value:
"WIN32"="%System%\WIN32.EXE"

and the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Unfortunately, I think that manual removal instructions won't work in this case. There might more more malicious files than just those listed above.  

I recommend using Kaspersky Antivirus. You can download it form here:
http://esd.element5.com/product.html?productid=300324331&nolselection=1

Just install it, update and run  a system scan. Maybe Kaspersky will remove this virus completely from your PC.
Logged
SoulBreaker
Newbie
*
Posts: 3


View Profile
« Reply #2 on: January 24, 2010, 06:37:06 AM »

i got site advisor off, but this program wont uninstall:

Mcafee Security center with virus scan 12.1 MSC

ive restarted my comp bout two times trying to get rid of it but it wont go away. it doesnt show up in add/remove programs. can you help me with this?
also, can this trojan infect burnt dvds and infect cds im ripping to my computer?
thanks for any help!
Logged
rodi
Administrator
Newbie
*****
Posts: 245


View Profile
« Reply #3 on: January 25, 2010, 06:00:14 AM »

Install CCleaner http://www.filehippo.com/download_ccleaner/
In CCleaner select "Tools" from the menu in the left.
Click Uninstall button and select Mcafee from the list. Then Click "Run uninstaller" button.
I hope that helps.

I can't guarantee you that this virus won't infected CDs. Notionally it can. Anyway, if you copy all your data to CDs and reformat your PC then you can always install a good anti-virus software on a clean computer and scan all CDs before copying files into computer again. Good luck!
Logged
SoulBreaker
Newbie
*
Posts: 3


View Profile
« Reply #4 on: January 26, 2010, 10:11:41 AM »

i got the mcafee stuff off with a seperate tool, and now it wants me to get rid of:

ESET NOD32

AND

ZoneAlarm Firewall

i couldnt find the uninstall mcafee part in ccleaner but ill have to check whether i can find these there.

also, i have to burn a DVD from my computer. will it be infected with anything or will it be ok? thx 4 any help

SoulBreaker, the concerned unintellingent comp user
Logged
Pages: [1]
  Print  
 
Jump to:  




Recommended software:
STOPzilla
(90/100)
STOPzilla is a powerful anti-spyware program that detects, blocks, and removes malicious software allowing users to surf the Web not worrying about spyware, Trojan horses,...
Malwarebytes Anti Malware
(88/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t...
Spyware Doctor
(87/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and...
SpyHunter
(86/100)
SpyHunter is a quite simple, but yet highly effective spyware remover with an easy-to-use interface. This program is an excellent choice for users, who are...
XoftSpySE Anti Spyware
(84/100)
XoftSpySE, an anti-spyware program made by ParetoLogic, Inc., is a simple, but effective on-demand scanner with the typical set of functions but very easy to...
Encyclopedia of parasites:

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
add text box
rss feed
help other