Daurso trojan: everything google affected

Hi,

Several days ago AVG/Windows notified me that I had win32/Daurso.A trojan, and that the threat was "severe". Apparently this tries to go in and get ftp info and I don't entirely understand the effect that should/could have on my system.

I went into safe mode and ran Spybot, Malware Bytes, and AVG full scans, which took hours. A trojan was found by Spybot, but it had a different name. It was hiding in Adobe Illustrator. I quarantined and deleted it. Things seemed to be working fine in regular mode and I ran several subsequent scans with various software, coming up with no problems. I also cleaned my registry with Easy Cleaner.

Then I began having problems doing my online work. I could get online but every time I pulled up google or gmail things got weird. I work for Leapforce and sign into a google subpage (www.google.com/x/x/x) and have to be signed into my gmail account to work. I also am required to use firefox with a specific toolbar that keeps track of my hours and the projects I do. Well, the Leapforce people cannot tell anymore when I am signed in to my toolbar and when I get projects for work, I cannot submit them. I am helpless and cannot work, thus cannot make a living right now. This disconnect from my work is all related to google and happened in direct correlation with acquiring Daurso.

I reinstalled Firefox and my toolbar. I also have been getting the error box "The application failed to initialize properly (0xc0000022)." It asks me to click OK to terminate the application. I am running Windows XP. In accordance with my research on this error I went into safe mode and via command prompts, went in and allowed all users access to all .dll files. This has not helped. I still cannot work and am having to use bing or other search engines, as google use causes my computer to slow, act as if it is not online, etc., and I am avoiding it. I will either redo my machine, which would be a pain because of some hefty programs I don't want to lose, and a great deal of data I'd have to back up, but if it is possible to fix some basic problems and have a working computer again, I would be thrilled!

Thanks to anyone who has advice. It will be greatly appreciated.

Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.

• When done, DDS will open two (2) logs:
  1. DDS.txt
  2. Attach.txt
• Save both reports to your desktop. Post them back to your topic.

---

Download GMER here by clicking download exe -button and then saving it your desktop:

• Double-click .exe that you downloaded
• Click rootkit-tab, uncheck files option and then click scan.
• Don't check
  Show All
  box while scanning in progress!
• When scanning is ready, click Copy.
• This copies log to clipboard
• Post log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.