trojan in explorer.exe

Well, anyway, what it did was that it ran the scan and then just finished. No prompts of any sort. Shouldn't it at least say "Scan finished, no problems found"?
 
No, same situation.

We then tried deleting the explorer file we had managed to expand, and ran the scan again. It didn't say anything that time either. :trample:
 
Grhh...

The infection has propably damaged the system. Seems that explorer.exe ins't the only thing that not working...

You could try to expand the explorer.exe again but this time restart the computer to the safe mode first. You could also try expanding via Task Manager

:bigthumb:
 
Expanded explorer.ex_ again, restarted to safe mode -- same error message.

Is it complete Windows re-installation time now? :sad:

Or could we do some other kind of scan, possibly an online scan, that will reveal the problem? (So far, we've kept the laptop disconnected from the network in case there was any risk of nasty hijacking...)
 
Hi :)

Yea the re-install might be the only solution.

This could also be worth a try (if the link you gave me is to the same variant you have) :

In safe mode via TaskManager:

delete explorer.exe file

Paste these lines on by one:
attrib -r -h -s "C:\WINDOWS\Inf\kbdb32.dll"
del /f /q "C:\WINDOWS\Inf\kbdb32.dll"

expand the explorer.exe again

restart the computer

:bigthumb:
 
OK, will try. Should say, however, that after reading the description of the trojan, we browsed the "WINDOWS\Inf\" folder and could not find that .dll-file...
 
OK in that case it propably won't help...

Sorry to say this but I think that it would be best to do a complete format & re-install.

We can't know what else the infection has damaged on the system....

Let me know if you need instructions :bigthumb:
 
OK - we'll let you know if we run into any problems with the re-install!

Other than that, thanks for all your help -- here's hoping we don't need it again! ;)
 
Ok good :)

Here are some simple steps that should help you to keep the computer clean and secure:
  • Use ATF Cleaner
    Download and install ATF Cleaner. Clean your temporary files & folders with it regularly.
  • Use Ad-Aware
    Download and install Ad-Aware. Update it and scan your computer regularly with it.
  • Use Ewido
    Update it and scan your computer regularly with it.
  • Use Spybot S&D
    Download and install Spybot S&D. Update it and scan your computer regularly with it.
  • Install SpywareBlaster
    SpywareBlaster will prevent spyware from being installed.
  • Install MVPS Hosts file
    This prevents your computer from connecting to harmful sites.
  • Use Firefox browser
    Firefox is faster, safer and better browser than Internet Explorer.
  • Keep your systen up-to-date
    Visit Windows Update regularly.
  • Keep your antivirus and firewall up-to-date
    Scan your computer regularly with your antivirus.
  • Read this article by TonyKlein
    So how did I get infected in the first place?
  • Stand Up and Be Counted !
    The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.

Stay clean and be safe ;)
 
You must log in or register to reply here.
Back
Top