Results 1 to 6 of 6

Thread: Can't get rid of trojan

  1. #1
    mickhutch Guest

    Default Can't get rid of trojan

    I hope this is the right section of the board for this query.

    I have been trying to get rid of Trojan-Downloader.Win32.Adload.jm for the past few days but it keeps coming back. On startup ZA reports that the trojan has been quarantined and is linked to a file tcinstall.exe on the desktop. Tcinstall never appears on the desktop - presumably because ZA has picked it up. I always delete the trojan but when I start up it goes through the same process. I have System Restore disabled and have checked the startup programs in the System Information but nothing indicates what could be installing this trojan.

    Any ideas?

    Operating System:Windows XP Pro
    Product Name:ZoneAlarm Pro
    Software Version:7.0

  2. #2
    Join Date
    Dec 2005
    Posts
    9,057

    Default Re: Can't get rid of trojan

    Hi


    Are you using the ZApro with a KAV6 or the ZASS?

    http://www.viruslist.com/en/viruses/...virusid=154503


    The tcinstall.exe sounds suspicious. It could be a form of spysheriff or even a rootkit.

    Try the freeware version of the superantispyware for the easy removal of tricky spyware. Here>

    http://www.superantispyware.com/

    As for the possible rootkits, there is a list to check out, but try the spyware removal first and see if this removed it comepletely.

    Oldsod
    Best regards.
    oldsod

  3. #3
    mickhutch Guest

    Default Re: Can't get rid of trojan

    Thanks, Oldsod. I have taken your advice and am trying superantispyware now. And, sorry, it is ZA Security Suite that I use - not ZA Pro.

  4. #4
    mickhutch Guest

    Default Re: Can't get rid of trojan

    I have now run superantispyware a few times and cleaned out the trojan. However, each time I do this and reboot the file'tcinstall.exe' is downloaded and placed on the desktop. The only way to avoid this happening is to disconnect from the internet before startup. I have checked for which process is loading the trojan but with no success. I just can't get rid of what is running to dl this trojan.

  5. #5
    Join Date
    Dec 2005
    Posts
    9,057

    Default Re: Can't get rid of trojan

    Hi mickhutch
    The possibility of a rootkit is very likely.

    Some of the very best advice in removal of malware such as this is to try a HJT forum. It is free and expert and they usually get to the right answers in no time.

    Please sign up as a member here>

    http://www.castlecops.com/modules.ph...nt&op=new_user



    Please follow the instructions here, since the requirements for posting does include the cleanup that is included in a link shown on this post>

    http://www.castlecops.com/t102301-Hi...e_Posting.html

    A HJT (HijackThis) gives them logs of your PC to read and based upon the findings, they will give theexact instructions to follow and remove the problem.

    It will go something like this>

    http://forums.techguy.org/security/5...re-adware.html

    But follow the HJT at castlecops, since they may find something else related to the PC that is not visibily seen or noticed.

    Best regards.
    Oldsod
    Best regards.
    oldsod

  6. #6
    donkeykonghere Guest

    Default Re: Can't get rid of trojan


    Hello
    mickhutch:


    I have the same problem as you do with the tcinstall.exe file.


    I have a tci.exe that keeps coming back to my C:\windows directory also.
    My computer is very buggy now doing weird things.

    It will not let me start any registry cleaning programs, or some spyware programs.













    Can you tell me if you have had any luck cleaning up your computer
    ?


    Email address removed to protect your security and to comply with the forum rules.Oldsod

    Message Edited by Oldsod on 04-12-2007 02:13 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •