Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Can Anyone Help Rescue My Laptop??

  • 03-07-2008 10:40pm
    #1
    cute_cow
    Registered Users, Registered Users 2 Posts: 636 ✭✭✭


    I have a 6 day old Acer Extensa 5620Z with Norton Anti Virus installed and working.

    However, after 2 days, my IE7 slowed down and will not load any website pages. My Norton trial expired, and I installed Avast and it immediately found win32:trojano-1165, a trojan horse that dates back to 2006.

    After 2 evenings of working on it and scans of the latest version of several tools, I'm still unable to remove this, completely and my IE7 performance has not improved, thats when it actually works at all.

    Currently installed are both Avast Home, which will not update since yesterday, and SUPERAntiSpyware which is completely up to date yet picks up nothing.
    Spybot with updates dated 2nd July also finds nothing.
    System Restore is currently turned off as ALL restore points under my user profile were infected (and shoudl have been removed when I switched it off yesterday.

    I've used MConfig, RunAnalyzer and CCleaner to inspect the startup items and have currently blocked just 1 suspicious entry from an unknown supplier.

    Bottom line, it looks like I need to get rid of the startup entry BM299b28c0 which is calling run32dll.exe and references a file called "bcmbclaf.dll,s"

    Every time I delete this registry key from the currentversion\run key it gets recreated and using Spybot real time protection engine can see attempts to create this key every few seconds.

    Can you please help me? How do I get rid of the remains of this trojan?

    AND was it on the preload, an even bigger concern?


Comments

  • #2
    -annex-
    Closed Accounts Posts: 163 ✭✭-annex-


    Ditch Norton, read the sticky:
    http://boards.ie/vbulletin/showthread.php?t=2055274237


  • #3
    humaxf1
    Registered Users, Registered Users 2 Posts: 865 ✭✭✭humaxf1


    Seeing as it's just over a week old and probably not alot saved on it, I'd reccommend an operating system restore. Ensure you do save anything like photos/music/documents etc first. Basically, this restores it back to the day it left the factory. One of the F keys will bring you into a menu with somehing like Recovery Partition mentioned (all laptops/PC manufacturers have their own menus) ""AND was it on the preload, an even bigger concern?"" Shouldn't be the case...but you never know!

    As annex said, ditch Norton and install AVG 8 maybe. I've had no probs with it. Then again, it all depends what you do on the Internet which may make your system easily infected.


  • #4
    R3al
    Closed Accounts Posts: 303 ✭✭R3al


    humaxf1 wrote: »
    Seeing as it's just over a week old and probably not alot saved on it, I'd reccommend an operating system restore.


    or if you want to be absolutly sure then why not format the drive and rebuild it, also you might consider losing IE7 in exchange for Firefox which is more secure


  • #5
    CantGetNoSleep
    Registered Users, Registered Users 2 Posts: 7,300 ✭✭✭CantGetNoSleep


    R3al wrote: »
    or if you want to be absolutly sure then why not format the drive and rebuild it, also you might consider losing IE7 in exchange for Firefox which is more secure
    Is this easy?


Advertisement