Halp Trojan

This is an archive of the mabination.com forums which were active from 2010 to 2018. You can not register, post or otherwise interact with the site other than browsing the content for historical purposes. The content is provided as-is, from the moment of the last backup taken of the database in 2019. Image and video embeds are disabled on purpose and represented textually since most of those links are dead.

To view other archive projects go to https://archives.mabination.com

BobYoMeowMeow wrote on 2011-03-18 02:13

The trojan;s name is System Tool
Shirayuki wrote on 2011-03-18 02:18

Apparently you should start your computer in safe mode and then pimp slap the virus, or system restore to an earlier point while in safe mode.
Piero wrote on 2011-03-18 02:20

What Panda said.
Hmm, what were you doing on the interwebs.
BobYoMeowMeow wrote on 2011-03-18 02:22

Quote from Piero;376627:
What Panda said.
Hmm, what were you doing on the interwebs.

Fedex email
common sense told the cat not to open the attachment
the cat didnt listen

http://blog.mxlab.eu/2008/08/09/fedex-tracking-number-trojan/
Cynic wrote on 2011-03-18 02:24

Ouch. Ones like that are my least favorite.

Re-start in safemode (preferably with networking) and run a program like malawarebytes to get rid of the virus. Ones such as that like to bury into your harddrive, so you will most likely have to remove the actual files from said harddrive yourself.
Let me see if I can find you a guide with that registry's to delete..

Edit: lolninja'd
Edit again: Here, this should make your life a whole lost easier-
http://www.bleepingcomputer.com/virus-removal/remove-system-tool
Devoth wrote on 2011-03-18 02:24

Download Malware Byte's Anti Malware.

Safe Mode.

Scan in Safe Mode.

Remove.

Win life.
ToriKitsune wrote on 2011-03-18 02:25

[FONT="Century Gothic"]Oh god that thing is a pain in the arse; I've had to rid my desktop of it multiple times :I
The first thing you can do is when you restart/boot up your computer and log on, use task manager to end a process with a random name (something like njfhaflasdfsfs.exe) and then set about removing it.
Or just start in safe mode...
Basically, follow these instructions, that's what I did. :awesome:[/FONT]
BobYoMeowMeow wrote on 2011-03-18 02:27

Gais
the cat used safe mode and system restored
now when the computer loads the OS, there's only a black screens
Chromatic wrote on 2011-03-18 02:40

most viruses these days attach themselves to system restore files
restoring the system to another day wont do anything
Micho wrote on 2011-03-18 02:40

Hai cat, unless you want to do a quick but not full removal of the lovely trojan you have downloading a simple anti-virus/malware program won't do the trick. I suggest you visit this site, I've been there a couple times, sure it's a slower route but they do their job well and clean everything up, no traces of the trojan will be left anywhere.

Open the spoiler if you actually want to use this site.
[SPOILER="Spoiler"]So if you actually wanna use TechSpot forums for your trojan removal this is what you do;
First, go to this thread, and follow the steps and post your own thread.
Second, after posting your own thread you have to check if you get any reply, it might take a while, depending if they're busy or not, remember, they are volunteers.
Third, if you get a response, yay, follow the moderators steps, and you should be done sooner than you expected.

Love, Micho.[/SPOILER]
BobYoMeowMeow wrote on 2011-03-18 02:46

Quote from Chromatic;376657:
most viruses these days attach themselves to system restore files
restoring the system to another day wont do anything

oh hey look, the cat doesnt see the trojan... yet
Chromatic wrote on 2011-03-18 03:00

Quote from BobYoMeowMeow;376667:
oh hey look, the cat doesnt see the trojan... yet

said most, didn't meant all >:
silentselene wrote on 2011-03-18 04:20

Does it say no OS detected or is it just a black screen? Sometimes I get the no OS message (perhaps GRUB failing to load) but rebooting always fixes that.
Osayidan wrote on 2011-03-18 10:46

We got a few clients at work with that.
Quickest way for us to fix it was reinstall after backing up their data. All the scanners we tried did nothing and manual removal would have taken longer than a reinstall and give less benefits, reinstall also gave the chance to upgrade to win7.