Need Help Removing Trojans

[mentorabc]

I am running Windows Home Premimum 64 bit.

I started having numerous problems a couple of weeks ago, including:

Screen resolution was changed, Clear Type and User Account Control were disabled, computer would stop responding temporarily of lock up completely, blue screen at boot up or computer would boot to recovery console, monitor would be on at boot up but would not come out of sleep mode. Finally last night the key board and mouse (both wired) stopped working. I changed the mouse and keyboard to ones that used usb connectors and was able to boot up again, and this keyboard and mouse work, but still having performance issues (hanging, 3D screen saver runs jerky. I tried to run Trend Micro Housecall but could not get to run. I tried to update the Nvidia drivers several times and my computer would shut down before the installtion was completed everytime. I would get a blue screen with the notice that the computer had been shut down to protect it from damage. Norton 360 found nothing. I have since uninstalled Norton. Ran AVG, nothing.

Finally Kaspersky online deep scan found these:

C:\ProgramFiles(X86)Online Services\eBay\WizLink.exe Trojan.Win32Agent.cwkw
C:\ProgramFiles(X86)Online Services\ESP\wizlink.exe Trojan.Win32Agent.cwkw
C:\ProgramFiles(X86)Online Services\quickenfc\WizLink.exe
Trojan.Win32Agent.cwkw

But did not offer a way to remove them.

Thank you.

 

[lemur]

This may be malware. Download and run spybot. Then Boot your computer into safe mode and run spybot again. Lemme know what happens.

 

[mentorabc]

Thank you lemur - I will try that.

 

[zigzag3143]

Thank you lemur - I will try that.

Hi and welcome to vistaX

Spybots is excellent for removal, but you have to ask yourself wouldn't you rather be completly sure?

If there is nothing on your computer that ypou cant live without and you have the vists dvd a clean install would remove anything malicious, make your system more efficient and clean out any junk you have installed and then installed.

Its something you are going to want to start thinking about in the future. Is you can disinfect and you are sure its clean make sure you backup

Good luck and let us know if we can help

Ken

 

[mentorabc]

"I ran Spybot in both normal startup - and safe mode. Nothing found. Can you tell me how to remove the ones listed in my original post? Thank you."

 

[zigzag3143]

"I ran Spybot in both normal startup - and safe mode. Nothing found. Can you tell me how to remove the ones listed in my original post? Thank you."

they may not have a method of removing them that wont break something. You can go to the folder they are in (in safe mode) and delete them.

Ken

 

[zigzag3143]

mentor

the better question is how did the trojans get on your system in the first place. Dont you have anti virus and firewalls? are they current?

I shouldn't be that easy to infect you

Ken

 

[JMH]

Hello mentorabc,
As well as the other good advice that you are receiving you could try running SuperAntiSpyware & Malwarebytes to see if they flush anything out. Both have a free version. I would suggest a "Complete Scan" with SuperAntiSpyware & it will take some time to complete. Reboot when finished.
Did your computer come with an AntiVirus preinstalled, & if so how did you remove it?

SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
Malwarebytes.org

 

[mentorabc]

"Thank you all for your suggestions. Yes, I have anti virus and a firewall. I removed Norton 360 using Nortons removal tool. I removed it because I felt it used far too much system resources and and adversely affected performance to the extent that it interfered with my use of my computer in gettig my work done. I replaced it with AVG which admittedly probably wasn't a good idea, but for what it's worth, it is current. I intend to purchase McAfee when I get this cleaned. I have tried every application I could find after making as certain as possible they were safe. So far, no luck. I don't really don't want to reinstall the os if I can avoid it. I am also concerned that I may load the trojans with other things I need to save on a backup disk before the re-installation, and reinstall them. I don't know enough about this to avoid that happening. Thank you"

 

[JMH]

"Thank you all for your suggestions. Yes, I have anti virus and a firewall. I removed Norton 360 using Nortons removal tool. I removed it because I felt it used far too much system resources and and adversely affected performance to the extent that it interfered with my use of my computer in gettig my work done. I replaced it with AVG which admittedly probably wasn't a good idea, but for what it's worth, it is current. I intend to purchase McAfee when I get this cleaned. I have tried every application I could find after making as certain as possible they were safe. So far, no luck. I don't really don't want to reinstall the os if I can avoid it. I am also concerned that I may load the trojans with other things I need to save on a backup disk before the re-installation, and reinstall them. I don't know enough about this to avoid that happening. Thank you"

You did the correct thing using the appropriate removal tool.
Sometimes it needs to be re run as remnants can still remain & create havoc with your computer & subsequent Anti Virus applications. Reboot.
Re AVG opinions vary as to how good it - & other AV progs are. FWIW I run AVG Anti Virus Pro on two laptops & see no reason to change.
I can understand your reluctance to reinstall.
Good luck & keep us posted with what happens.

 

[Frostmourne]

McAffee is even weaker than AVG. Use Norton or Kaspersky. Neither will slow you down. A full system scan with SuperAntiSpyware is dependent on your hard drive. A 7200RPM 320GB hard drive that is 34% full takes around 40min. You can use the Ubuntu live cd to delete malware if you know where it is.

 

[Neverhavemoney]

If there are any problems, please move this conversation to http://www.vistax64.com/system-security/192246-infection-resolving-team.html
You will get a lot of help and support there.

Thanks,
Ben

 

[JMH]

If there are any problems, please move this conversation to http://www.vistax64.com/system-security/192246-infection-resolving-team.html
You will get a lot of help and support there.

Thanks,
Ben

Thanks Ben for the timely reminder.
Are you back helping out again?

 

[Neverhavemoney]

Yes sir,
When i can. Its my senior year in H.S so i am packed with work and college appying and whatnot. Plus a job, family, and signifigant other there seems to be no time but when i can i will be sure to try my hardest to get on and help out.

Thanks Everyone,
Ben

If there are any problems, please move this conversation to http://www.vistax64.com/system-security/192246-infection-resolving-team.html
You will get a lot of help and support there.

Thanks,
Ben

Thanks Ben for the timely reminder.
Are you back helping out again?

 

[JMH]

Yes sir,
When i can. Its my senior year in H.S so i am packed with work and college appying and whatnot. Plus a job, family, and signifigant other there seems to be no time but when i can i will be sure to try my hardest to get on and help out.

Thanks Everyone,
Ben

If there are any problems, please move this conversation to http://www.vistax64.com/system-security/192246-infection-resolving-team.html
You will get a lot of help and support there.

Thanks,
Ben

Thanks Ben for the timely reminder.
Are you back helping out again?

[There's no rest for the wicked.]
Good luck with all of the challenges that are ahead of you.
BTW. Nice to have you back.

 

[Neverhavemoney]

Thanks bud,
Its so nice to know that i have supporters.

Thanks a ton everyone,
Ben

Yes sir,
When i can. Its my senior year in H.S so i am packed with work and college appying and whatnot. Plus a job, family, and signifigant other there seems to be no time but when i can i will be sure to try my hardest to get on and help out.

Thanks Everyone,
Ben

Thanks Ben for the timely reminder.
Are you back helping out again?

[There's no rest for the wicked.]
Good luck with all of the challenges that are ahead of you.
BTW. Nice to have you back.