G_D DAMN Trojan Adwaheck Worm! Help!

[RetroLounge]

How do I get rid of this thing?

I have the latest Nortons. I ran the scan, but it won't delete it. I ran the scan in Safe Mode, but it won't delete it. I ran Adaware, Spybot, etc.

I've followed all of Norton's instructions.

It say I have a worm Trojan Adwaheck in compressed file counter.exe in C:\Counter.cab.

Any ideas how to get rid of this thing?

Thanks

RL

[NewHampshireDem]

1. Check this general malware FAQ

http://www.dslreports.com/faq/8428

I used it once to get rid of that #@$% CoolWebSearch malware ... took about 2 hours, but finally killed it.

My advice would be to read through it, get all the downloads/programs, THEN start the process.

Keep in mind that some malware will prevent you from downloading the programs you need to delete it, so you might need access to a second machine, preferably one with a CD burner so you can make a disc to transfer the files safely (a floppy or thumb drive could spread the infection).

Good luck.

[RetroLounge]

3. Thanks. Trojan Hunter got a few I didn't know about.

But not the Adwaheck...

RL

[Berserker]

2. Try this

Look for counter.cab or exe as a regular file and not in your Registry. When norton did the scan it should have told you where to look for it. Once you find it Boot into safe mode right click on it and delete. Reboot and run another scan to see if it is gone.

[RetroLounge]

4. Got It! Thanks!

It was actually a winzip file called Counter.

I deleted it and emptied my recycle bin.

Then re-ran nortons, adaware, Spybot, and it's now clean!

Thanks

RL

[RoyGBiv]

5. Suggestion ...

Consider changing your anti-virus program. Based on this incident and another comment you made about other trojans you didn't know about, it looks like Norton isn't doing it's job. I've had to fix a lot of systems that relied on Norton.

Anyway, Berserker, who is turning into our resident expert on such things, has a link in his sig pointing to security tools. One of the links in that is for "Grisoft AVG Download." This is an excellent, free anti-virus program that updates itself automatically on a daily basis.

[RetroLounge]

6. Thanks! I'll look into it...

RL