Discussion in 'malware problems & news' started by jb123, Dec 31, 2003.

Thread Status:
Not open for further replies.
  1. jb123

    jb123 Guest

    newbie here.....any suggestions on removing this....this.... sob o_Oo_O

    jb123 (Senior Member) (IP)

    (12-31-2003 03:54 PM) report / quote / edit (#10) are the rav results....any easy removal suggestions......or should i do the above mentioned scan??

    Scan started at 12/31/2003 10:46:48 AM

    Scanning memory...
    Scanning boot sectors...
    Scanning files...
    C:\WINDOWS\SYSTEM32\Zjkr5h.exe - TrojanDownloader:Win32/VB.Q -> Infected
    C:\WINDOWS\SYSTEM32\Urm2.exe - TrojanDownloader:Win32/VB.Q -> Infected
    C:\WINDOWS\SYSTEM32\Ehz5v20W.exe - TrojanDownloader:Win32/VB.Q -> Infected
    C:\WINDOWS\SYSTEM32\WofE5.exe - TrojanDownloader:Win32/VB.Q -> Infected
    C:\WINDOWS\SYSTEM32\JtaALqr.exe - TrojanDownloader:Win32/VB.Q -> Infected
    C:\WINDOWS\SYSTEM32\Ere6Z.exe - TrojanDownloader:Win32/VB.Q -> Infected

    Objects: 6838
    Directories: 194
    Archives: 11
    Size(Kb): 1054046
    Infected files: 6

    Viruses found: 1
    Suspicious files: 0
    Disinfected files: 0
    Mail files: 1
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Apr 27, 2002
    Hi jb123,

    Download and run this file to fix Peper Trojan:
    double click on 'uninst.exe', let it run and terminate.
    To delete all the associated files download the following tool:
    It will self extract to C:.
    Find :
    C:\drpeper\Find backup and Delete Peper files.vbs file and double click.
    On the first prompt copy and paste:
    Select one of the filenames in the running processes.
    And hit ok.
    You will get a confirmation and proceed:
    On the second, paste:
    Type in the filename where the startup entry points to.
    And hit ok

    It will find all the files, delete them and will make backups in the same folder.
    It'll open a text file (Peper.txt) with the list of all files deleted.
    Check that .txt file to see if no legitimate files were removed.

    If you are unsure which filenames to use, please follow instructions here:

    With the help of the HijackThis log I can help you find the filenames you need.


  3. FredvanS

    FredvanS Guest

    I have difficulty removing TrojanDownloader.Win32.Dyfuca.o
    Any suggestions? Help! o_O
  4. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Apr 27, 2002
    Follow the instructions in this post:
    and start your own thread in that section.


Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.