I have a trojan horse on my kids laptop, and it apparently eminates from a rootkit process. When the machine boots, McAfee tells me it has found FURootkit, and it has deleted it, but this is after it has done its thing in the bootsector. After downloading ProcessGuard, I see this pokapoka67.exe file that it has allowed to run. Any idea as to what this file is, and if it has anything to do with my trojan horse? The real issue is getting rid of the trojan horse, which is why I am here. Please help!
Found something here: http://discussions.virtualdr.com/showthread.php?t=193925 http://forums.techguy.org/t394921.html http://forums.maddoktor2.com/index.php?showtopic=5619
it is a nasty this is the fix Download LQfix.exe and place it on your desktop. Doubleclick LQfix.exe and click install. This will create a new folder called LQfix on your desktop. Open the folder and doubleclick ClickThis.bat Follow the prompts on the screen. Your system will reboot afterwards. Please be patient after reboot, because there is a script running in the background. but post a HJT log at one of the cleaning sites afterwards as there is bound to be a lot more there as this pest rarely is alone
