PDA

View Full Version : Please help disinfect me



Ryan
01-08-2008, 11:18 PM
My computer is infected with the Trojan32Winhook malware.

I am running Vista but my Avira AV sw cannot delete or quarantine it.

I've tried installing AVG, running TrendMicro online "house call" which all pick up the malware but don't get rid of it.

Any help greatly appreciated.

WildCards
01-08-2008, 11:24 PM
Put your left index finger in your ear and run anti clockwise 3 times shouting I am not gay.

You WILL be cured.

Turbo_Steve
01-08-2008, 11:31 PM
Best bet is to get someone to make you up a Bootdisk with some AV software on it.

martin_y
02-08-2008, 07:01 AM
try a free download: "spybot search and destroy".

Nick VR4
02-08-2008, 01:53 PM
http://www.spywareremove.com/removewinhookexe.html

I cant say if this is any good

Nevman
02-08-2008, 04:08 PM
Format C: usually helps :)

g8legnum
04-08-2008, 12:22 PM
Try this one: http://www.trustedsource.org/malware-virus-description/244058/Trojan-Proxy-Delf-CA. Seems to give fairly detailed instructions on removal if you are confident enough with what you are doing.

Ryan
04-08-2008, 08:06 PM
Thanks for the help guys - landed up just formatting and reinstalling Vista on Sunday evening. my primary HDD is split into two partitions, one for OS and one for software so it wasn't a train smash to do - just sort a minor inconvenience.

But ja, now back up and running with SP1 and Kaspersky 2009 installed :)

Nevman
04-08-2008, 08:46 PM
You may need to perform low-level-format.
If the bug sits in MBR, standard format (aka high-level-format) may not cure the problem.
I've found this software:
http://hddguru.com/content/en/software/2006.04.12-HDD-Low-Level-Format-Tool/
but I've never used it before and not sure if that is OK.
Also you may need to do it from the command line after partitioning, having a partitioning DOS program on the FDD, CD or memory stick.

g8legnum
05-08-2008, 10:08 AM
You may need to perform low-level-format.
If the bug sits in MBR, standard format (aka high-level-format) may not cure the problem. From the link I found it appears to be a normal app and some registry entries, so the re-install will have removed it. But good point about where these snidy people stick their virus's.