Hi, I have run an anti spyware scan and my virus software (AVG) has informed me that i have a 'Trojan horse crypt.qco'. It says that this file has infected my 'C:\WINDOWS\System32\userinit.exe' file and that it cant be removed. Any ideas? i have searched the internet but not found anything to do with this type of trojan horse. Please help! Cheers.
I see you haven’t had any help for 4 days. If you’re still having problems, do this: Use these steps to Clean your machine and if you still have problems, Post the Logs and I’ll give you a hand with the rest…… Step 1: On a clean computer follow these instructions to create a Rescue disk to be run on the infected computer: http://forum.avira.com/wbb/index.php?page=Thread&threadID=82163 Step 2: After running the Rescue Disk, Reboot to Windows: Download and install CCleaner Now run Ccleaner with the default options (that means don’t change anything) to clean out temporary files. Only use the default settings on the Windows Tab and select Run Cleaner. Do not run any other options from other tabs. Also it is highly recommended to login to all other User Accounts on the PC. Run CCleaner on each account. This can greatly reduce scan time and log sizes from the later scanning you will do below. If you don’t see Ccleaner’s link when logging into the other accounts, just go to the C:\Program Files\Ccleaner folder and double click on the ccleaner.exe file to run it. You can also create a shortcut to the file on the Desktop of your other user accounts to make it easier to run in the future Step 3: Uninstall Known Malware and Unwanted Software Work thru the below link to uninstall any bad programs that should not be installed on your PC. This may in some instances even resolve your problems. It takes a small amount of time (based on your experience level) to do this comparison, but it is well worth the effort. Uninstall Malware via Add/Remove Programs Step 4: Now download the below tools ( PLEASE only download at this point ): SUPERAntiSpyware Malwarebytes Anti-Malware Step 5: Installing, Configuring and Running the Scans Follow the instructions to run SUPERAntiSpyware HERE Next Follow these instructions to run MalwareBytes AntiMalware HERE If you’re still having problems then: Download HJTInstall.exe to your Desktop. Doubleclick HJTInstall.exe to install it. By default it will install to C:\Program Files\Trend Micro\HijackThis. Click on Install. It will create a HijackThis icon on the desktop. Once installed, it will launch Hijackthis. Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. The log will be saved as HijackThis.log in the C:\Program Files\Trend Micro\HijackThis folder. Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required. Please copy and paste this Log and the Logs from SAS and MBAM in your next reply and explain, as best you can, what problems you are having….. Thanks. 2oG
