Trojan Klone AO

luangwablondes · Mar 19, 2008

I tried a free scan program, and it came up with Klone AO. Does Windows

Defender detect and remove this?

If not, besides buying another program as a once off, is there another

solution? I'm computer challenged.

PA Bear [MS MVP] · Mar 19, 2008

What anti-virus application or security suite is installed? What

anti-spyware applications (other than Defender)? What third-party firewall

(if any)?

===================

Microsoft has established separate newsgroups for Windows Defender support

and comments. This is not one of them. See

http://www.microsoft.com/athome/security/s...ps/default.mspx

===================

Unexplained computer behavior may be caused by deceptive software

http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log

to an appropriate forum.

Checking for/Help with Hijackware

http://aumha.org/a/parasite.htm

http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=5878

http://wiki.castlecops.com/Malware_Removal...n:_Introduction

http://mvps.org/winhelp2002/unwanted.htm

http://inetexplorer.mvps.org/data/prevention.htm

http://inetexplorer.mvps.org/tshoot.html

http://www.mvps.org/sramesh2k/Malware_Defence.htm

http://defendingyourmachine2.blogspot.com/

http://www.elephantboycomputers.com/page2....emoving_Malware

When all else fails, HijackThis v2.0.2

(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.

It will help you to both identify and remove any hijackware/spyware with

assistance from an expert. Post your log to

http://forums.spybot.info/forumdisplay.php?f=22,

http://castlecops.com/forum67.html,

http://forums.subratam.org/index.php?showforum=7,

http://aumha.net/viewforum.php?f=30, or other appropriate forums for review

by an expert in such matters, not here.

If the procedures look too complex - and there is no shame in admitting this

isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA) computer repair shop.

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.net/

luangwablondes wrote:

> I tried a free scan program, and it came up with Klone AO. Does Windows

> Defender detect and remove this?

>

> If not, besides buying another program as a once off, is there another

> solution? I'm computer challenged.

David H. Lipman · Mar 19, 2008

PA Bear [MS MVP] · Mar 19, 2008

FYI, these days just about all of us are asking first-time posters to do the

following to save time and to give us more to work with from the git-go:

1. Install HijackThis using the installer from TrendMicro but not scan:

http://www.trendsecure.com/portal/en-US/_d.../HJTInstall.exe

2. Disable Notepad: Format | Word wrap.

3. Download/run Deckard's System Scanner:

http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt, which includes a HJT log)

5. And then post the contents of Main.txt as well as that of

%system%\Deckards\Extra.txt in their first post.

--

~Robear

David H. Lipman wrote:

<snip>

> Download and execute HiJack This! (HJT)

> http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe

>

> Create a HJT log file and post it in one of the below locations...

>

> { Please - Do NOT post the HJT Log here ! }

>

> Forums where you can get expert advice for HiJack This! (HJT) logs.

<snip>

David H. Lipman · Mar 19, 2008

From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>

| FYI, these days just about all of us are asking first-time posters to do the

| following to save time and to give us more to work with from the git-go:

|

| 1. Install HijackThis using the installer from TrendMicro but not scan:

| http://www.trendsecure.com/portal/en-US/_d.../HJTInstall.exe

|

| 2. Disable Notepad: Format | Word wrap.

|

| 3. Download/run Deckard's System Scanner:

| http://www.techsupportforum.com/sectools/Deckard/dss.exe

|

| 4. Save the scan results (Main.txt, which includes a HJT log)

|

| 5. And then post the contents of Main.txt as well as that of

| %system%\Deckards\Extra.txt in their first post.

Noted -- Gratzi !

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

PA Bear [MS MVP] · Mar 19, 2008

David H. Lipman wrote:

> From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>

>

>> FYI, these days just about all of us are asking first-time posters to do

>> the following to save time and to give us more to work with from the

>> git-go:

>>

>> 1. Install HijackThis using the installer from TrendMicro but not scan:

>> http://www.trendsecure.com/portal/en-US/_d.../HJTInstall.exe

>>

>> 2. Disable Notepad: Format | Word wrap.

>>

>> 3. Download/run Deckard's System Scanner:

>> http://www.techsupportforum.com/sectools/Deckard/dss.exe

>>

>> 4. Save the scan results (Main.txt, which includes a HJT log)

>>

>> 5. And then post the contents of Main.txt as well as that of

>> %system%DeckardsExtra.txt in their first post.

>

> Noted -- Gratzi !

Prego. Those logs contain a /wealth/ of very useful, often very

interesting, information and help to avoid having to ask for more info or

additional scans.

David H. Lipman · Mar 19, 2008

From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>

|

| Prego. Those logs contain a /wealth/ of very useful, often very

| interesting, information and help to avoid having to ask for more info or

| additional scans.

Yes, I ran it.

Having information up front in a forum post would save time and it provides information that

HJT doesn't.

--

Dave

http://www.claymania.com/removal-trojan-adware.html

Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

PA Bear [MS MVP] · Mar 19, 2008

David H. Lipman wrote:

>> Prego. Those logs contain a /wealth/ of very useful, often very

>> interesting, information and help to avoid having to ask for more info or

>> additional scans.

>

> Yes, I ran it.

> Having information up front in a forum post would save time and it

> provides

> information that HJT doesn't.

I thought you'd like that! <eg>

BoaterDave · Mar 20, 2008

"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message

news:ex9nzWjiIHA.5504@TK2MSFTNGP05.phx.gbl...

> David H. Lipman wrote:

>>> Prego. Those logs contain a /wealth/ of very useful, often very

>>> interesting, information and help to avoid having to ask for more info

>>> or

>>> additional scans.

>>

>> Yes, I ran it.

>> Having information up front in a forum post would save time and it

>> provides

>> information that HJT doesn't.

>

> I thought you'd like that! <eg>

Shows up the weak spots, eh? !!

BD

Trojan Klone AO

luangwablondes

Guest

PA Bear [MS MVP]

Guest

David H. Lipman

Guest

PA Bear [MS MVP]

Guest

David H. Lipman

Guest

PA Bear [MS MVP]

Guest

David H. Lipman

Guest

PA Bear [MS MVP]

Guest

BoaterDave

Guest