TWSupport-Smooth,Clean Support


    [HIJACKTHIS] Uh Oh

    Share
    avatar
    TheRiff
    Designer
    Designer

    Age : 28
    Number of posts : 65
    Registration date : 2008-08-09
    Computer Specs : Windows Vista Home Premium

    [HIJACKTHIS] Uh Oh

    Post by TheRiff on Sat Oct 11, 2008 5:02 am

    So I'm busy doing my Norton Weekly Virus scan...

    and...

    it says I have W32.DSS.Trojan Shocked Shocked

    While I don't know a lot about viruses, I do know that this is NOT good.

    How can I get rid of this???

    I need serious help!
    avatar
    Placehold
    TWS Manager
    TWS Manager

    Age : 33
    Number of posts : 730
    Registration date : 2008-04-15
    Computer Specs : Windows Vista home premium :: Intel(R) Core(TM) Duo CPU
    Additional Specs : T7250 @ 2.00GHz :: 4.00 GD RAM :: NVIDIA GeForce 8400M GT

    Re: [HIJACKTHIS] Uh Oh

    Post by Placehold on Sat Oct 11, 2008 2:57 pm

    That isn't good, Apparently common with Norton customers

    W32.DSS.Trojan is a Trojan horse that inserts a small Web page onto the computer. This Web page is then launched in a hidden Internet Explorer window.

    Threat Assessment
    Wild

    Wild Level: Medium
    Number of Infections: 50 - 999
    Number of Sites: More than 10
    Geographical Distribution: Medium
    Threat Containment: Easy
    Removal: Moderate

    Damage

    Damage Level: Low

    Distribution

    Distribution Level: Low

    Writeup By: Atli Gudmundsson



    Removal

    Step 1:

    Use Windows Task Manager to Remove Trojan.Win32.DSS Processes

    1. Open Task Manager

    2. Click on the "Processes" tab and search for "Trojan.Win32.DSS" process by name.

    3. Select the "Trojan.Win32.DSS" process and click on the "End Process" button to kill it.

    4. Remove the "Trojan.Win32.DSS" processes files:
    • jur.exe
    • jur.exec-a-s-i-n-o.exe
    • c-a-s-i-n-o.exe




    Step 2:

    Use Windows File Search Tool to Find Trojan.Win32.DSS Path

    1. Go to Start > Search > All Files or Folders.

    2. In the "All or part of the the file name" section, type in "Trojan.Win32.DSS".

    3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search".

    4. When Windows finishes your search, hover over the "In Folder" of "Trojan.Win32.DSS", Delete all the folders and files relating to Trojan.Win32.DSS".



    Step 3:

    Detect and Delete Other Trojan.Win32.DSS Files

    1. Open windows "Command Prompt".

    2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.

    3. To change directory, type in "cd name_of_the_folder" (for example, C:\Spyware-folder).

    4. Once you have the file you're looking for delete them by typing in "del name_of_the_file" (Or one of the below)

    4b. To delete a file in folder, type in "del name_of_the_file".

    4c. To delete the entire folder, type in "rmdir /S name_of_the_folder".



    I would also recommend you download a third party virus scanner such as Lavasoft Ad-aware.

    Ad-Aware is a free virus program that will most certainly detect and remove the remainders of the trojan

    Regards






    Craig


    _________________
    avatar
    TheRiff
    Designer
    Designer

    Age : 28
    Number of posts : 65
    Registration date : 2008-08-09
    Computer Specs : Windows Vista Home Premium

    Re: [HIJACKTHIS] Uh Oh

    Post by TheRiff on Sat Oct 11, 2008 5:29 pm

    I'll try and do this, thanks Placehold.
    avatar
    TheRiff
    Designer
    Designer

    Age : 28
    Number of posts : 65
    Registration date : 2008-08-09
    Computer Specs : Windows Vista Home Premium

    Re: [HIJACKTHIS] Uh Oh

    Post by TheRiff on Sat Oct 11, 2008 5:41 pm

    I tried the 1st and 2nd steps, and I couldn't find anything with the Trojan in my processes or in my Files...

    Should I just do another scan to check if it's still there??
    avatar
    Placehold
    TWS Manager
    TWS Manager

    Age : 33
    Number of posts : 730
    Registration date : 2008-04-15
    Computer Specs : Windows Vista home premium :: Intel(R) Core(TM) Duo CPU
    Additional Specs : T7250 @ 2.00GHz :: 4.00 GD RAM :: NVIDIA GeForce 8400M GT

    Re: [HIJACKTHIS] Uh Oh

    Post by Placehold on Sat Oct 11, 2008 5:55 pm

    Check the processes for "Win32.DSS Trojan" just incase

    Perform another scan with Ad-Aware to be on the safe side however you may need to check your "Add/Remove" programs as well as do a quick search through your registry

    Perform a full backup of your system before starting

    1. Open "Regedit"

    2. Select "File" and click "Export"

    3. Save to a safe location

    4. Select "Edit"

    5. Then select "Find"

    6. Enter "Trojan.Win32.DSS" or "Win32.DSS Trojan" and "Search"

    7. Delete anything that relates to it (Most likely a whole key)

    Restart your PC and hopefully there shouldn't be any further issues Smile

    Regards








    Craig


    _________________
    avatar
    TheRiff
    Designer
    Designer

    Age : 28
    Number of posts : 65
    Registration date : 2008-08-09
    Computer Specs : Windows Vista Home Premium

    Re: [HIJACKTHIS] Uh Oh

    Post by TheRiff on Sat Oct 11, 2008 6:01 pm

    Alright I'll try this.
    avatar
    TheRiff
    Designer
    Designer

    Age : 28
    Number of posts : 65
    Registration date : 2008-08-09
    Computer Specs : Windows Vista Home Premium

    Re: [HIJACKTHIS] Uh Oh

    Post by TheRiff on Sat Oct 11, 2008 6:36 pm

    So I finished the Ad-Aware scan, and all that showed up as critical objects were 22 Tracking Cookies... This is a little weird...
    avatar
    Placehold
    TWS Manager
    TWS Manager

    Age : 33
    Number of posts : 730
    Registration date : 2008-04-15
    Computer Specs : Windows Vista home premium :: Intel(R) Core(TM) Duo CPU
    Additional Specs : T7250 @ 2.00GHz :: 4.00 GD RAM :: NVIDIA GeForce 8400M GT

    Re: [HIJACKTHIS] Uh Oh

    Post by Placehold on Sat Oct 11, 2008 6:43 pm

    Well the only way that this would be possible not to find anything is if there wasn't anything there now or if it renamed itself

    Follow the instructions for Hijackthis, This should determine if the trojan has been removed or not

    => HiJackThis

    regards







    Craig


    _________________
    avatar
    Placehold
    TWS Manager
    TWS Manager

    Age : 33
    Number of posts : 730
    Registration date : 2008-04-15
    Computer Specs : Windows Vista home premium :: Intel(R) Core(TM) Duo CPU
    Additional Specs : T7250 @ 2.00GHz :: 4.00 GD RAM :: NVIDIA GeForce 8400M GT

    Re: [HIJACKTHIS] Uh Oh

    Post by Placehold on Sun Oct 12, 2008 4:24 pm

    HJT Log Moved to HiJackThis Forum

    => HiJackThis Log

    Regards






    Craig


    _________________

    Sponsored content

    Re: [HIJACKTHIS] Uh Oh

    Post by Sponsored content


      Current date/time is Tue Nov 13, 2018 12:46 am