I think i have a trojan virus

[BigG1]

I have KIS 2010 and apparently it has found a trojan and i do not know how to get rid of it! When i try and fix it, all that happens is that it gives me the option to skip!

So i downloaded the Kaspersky Virus Removal Tool and ran that and hopefully i have sent the right thing, as i am a bit of a novice when it comes to pc's

Any help will be greatly appreciated!

[Rene-gad]

Hello,
Close/unload all the programs excepted AVZ and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore


- Execute following script in Manual Healing

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys','');
 QuarantineFile('C:\Program Files\lg_fwupdate\fwupdate.exe','');
 QuarantineFile('C:\Windows\Kcenaa.exe','');
 QuarantineFile('C:\Users\Graham\AppData\Local\Temp\Kjg.exe','');
 DeleteFile('C:\Users\Graham\AppData\Local\Temp\Kjg.exe');
 RegKeyParamDel('HKEY_USERS','S-1-5-21-1119381202-1283411801-3096607154-1000\Software\Microsoft\Windows\CurrentVersion\Run','YVIBBBHA8C');
 DeleteFile('C:\Windows\Kcenaa.exe');
 RegKeyParamDel('HKEY_USERS','S-1-5-21-1119381202-1283411801-3096607154-1000\Software\Microsoft\Windows\CurrentVersion\Run','WEK9EMDHI9');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=74513

[BigG1]

is it the same if i use firefox instead of IE?

[Rene-gad]

is it the same if i use firefox instead of IE?

If you have IE installed - you have to start IE

[BigG1]

i have uploaded it.

[Rene-gad]

i have uploaded it.

It's OK
Pls. make a new log of AVPtool and a log og Hijackthis.
Attach both to your next post.

[BigG1]

do you mean another sysinfo.zip? and what is hijack this?

[Rene-gad]

do you mean another sysinfo.zip?

Yes, sure, a new one: we'd like to see what changins brought our healing.

and what is hijack this?

Click!

[BigG1]

here is one of them, having a few issues with hijack this, but will look into it later!

[Rene-gad]

The log is OK.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 9
• В ходе лечения вредоносные программы в карантинах не обнаружены