bigalt
Topic Starter
I originally posted a request for assistance with an apparent trojan in one of my Windows/System32 files (joyNic.dll). My Trend Micro antivirus program continually shows I have a TROJ_CONHOOK.AA in this file. I cannot quarantine it or delete it. I don't know whether this is a legitimate threat, or not.
I received a response from LD Tate suggesting I download HijackThis software, run a scan, and send him the log via this forum. I did this, but was unable to transmit the log to him. Everytime I hit the ADDREPLY button, I received an error message indicating I am not authorized to do this. Any suggestions?
Below you will find a pasted copy of the original posts:
TROJ_CONHOOK.AA, troj_conhook.aa in Windows XP
Options V
V Track this topic
V Email this topic
V Print this topic
V Download this topic
V Subscribe to this forum
Display Modes
V Switch to: Outline
V Standard
V Switch to: Linear+
bigalt
post Feb 11 2007, 06:22 PM
Post #1
New Member
*
Group: New Member
Posts: 3
Joined: 11-February 07
Member No.: 67,506
Operating System: Windows XP
Gender:Male
I previously posted this in another forum, and was directed to post it here. I am currently using Trend Micro PC-Cillin 2007 Internet Security. It warns me that I have a TROJ_CONHOOK.AA trojan in a particular Windows operating file (joyNic.dll). The Trend Micro program is unable to clean, quarantine, or remove this trojan. When I search for the file, using Windows tools, I can locate it, but when I attempt to delete it, I receive a message indicating it cannot be removed, since it is involved with another program. A few questions:
1) Does anyone have familiarity with this trojan, and if so, is it a true threat?
2) Trend Micro did provide me with a link to their "System Cleaner," but the steps were a bit too overwhelming for me, since I am not exactly computer savvy, and fear that I will totally crash my system. Is there a relatively simple way to resolve this problem?
Thanks
User is online!Profile CardPM
Go to the top of the page
+Quote Post
V Full Edit
V Quick Edit
LDTate
post Feb 11 2007, 09:18 PM
Post #2
Forum God
Group Icon
Group: Administrator
Posts: 25,622
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
Gender:Male
Hello and Welcome to the Forum.
you can get a complete installer that installs HijackThis to C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut from http://downloads.malwareremoval.com/HJTsetup.exe.
Click on the link and select Save, save it to your desktop and double click HJTsetup.exe.
Open HijackThis and select: Do a system scan and save a log file.
When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here please use the [Add Reply] button below.
Please use the IPB Image Button below to reply.
——————–
Want to help others? Join the ClassRoom and learn how.
I don't answer HJT logs by email or PM.
Ad-Aware SpyBot HijackThis CWShredder SpywareBlaster Free on-line Scan
If you wish, you may donate to the forum.
User is online!Profile CardPM
Go to the top of the page
+Quote Post
V Full Edit
V Quick Edit
« Next Oldest · Old Un-Resolved HJT Logs · Next Newest »
Reply to this topicStart new topic
1 User(s) are reading this topic (0 Guests and 0 Anonymous Users)
1 Members: bigalt
Forum HomeSearchHelpSelf Help: (New computer users please use the HiJackThis logs forum for help) |– Self Help Fixes for Slyware |– Security Related Self Help Tutorials |– If You Need Help with Self HelpHijackThis / Computer Help |– HijackThis Logs and Spyware/Malware Removal |– Other Computer Problems |– Resolved HijackThis Logs |– Old Un-Resolved HJT LogsLinks and Updates |– OPEN (Not for computer help, this is for open news and talking) |– Computer Related Web Links |– Updates To Software |—- Archive Old Updates |– WolfchatTomCoyote Forum News And Suggestions |– Comments and Suggestions |– TomCoyote News |– Computer TipsTest |– Test
Display Mode: Standard · Switch to: Linear+ · Switch to: Outline
Track this topic · Email this topic · Print this topic · Subscribe to this forum
-
TomCoyote HJT Forum
IPB 2.1 (Not Default)TomCoyote (default)
English
Lo-Fi Version 0.0808 sec 0.05 10 queries GZIP Enabled
Time is now: 24th February 2007 - 05:57 PM
The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
© 2007 Geeks to Go, Inc. | All Rights Reserved | Privacy Policy
Skin: forum informatique
Invision Power Board v2.1.7 © 20
I received a response from LD Tate suggesting I download HijackThis software, run a scan, and send him the log via this forum. I did this, but was unable to transmit the log to him. Everytime I hit the ADDREPLY button, I received an error message indicating I am not authorized to do this. Any suggestions?
Below you will find a pasted copy of the original posts:
TROJ_CONHOOK.AA, troj_conhook.aa in Windows XP
Options V
V Track this topic
V Email this topic
V Print this topic
V Download this topic
V Subscribe to this forum
Display Modes
V Switch to: Outline
V Standard
V Switch to: Linear+
bigalt
post Feb 11 2007, 06:22 PM
Post #1
New Member
*
Group: New Member
Posts: 3
Joined: 11-February 07
Member No.: 67,506
Operating System: Windows XP
Gender:Male
I previously posted this in another forum, and was directed to post it here. I am currently using Trend Micro PC-Cillin 2007 Internet Security. It warns me that I have a TROJ_CONHOOK.AA trojan in a particular Windows operating file (joyNic.dll). The Trend Micro program is unable to clean, quarantine, or remove this trojan. When I search for the file, using Windows tools, I can locate it, but when I attempt to delete it, I receive a message indicating it cannot be removed, since it is involved with another program. A few questions:
1) Does anyone have familiarity with this trojan, and if so, is it a true threat?
2) Trend Micro did provide me with a link to their "System Cleaner," but the steps were a bit too overwhelming for me, since I am not exactly computer savvy, and fear that I will totally crash my system. Is there a relatively simple way to resolve this problem?
Thanks
User is online!Profile CardPM
Go to the top of the page
+Quote Post
V Full Edit
V Quick Edit
LDTate
post Feb 11 2007, 09:18 PM
Post #2
Forum God
Group Icon
Group: Administrator
Posts: 25,622
Joined: 23-September 04
From: Missouri, USA
Member No.: 15,276
Gender:Male
Hello and Welcome to the Forum.
you can get a complete installer that installs HijackThis to C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut from http://downloads.malwareremoval.com/HJTsetup.exe.
Click on the link and select Save, save it to your desktop and double click HJTsetup.exe.
Open HijackThis and select: Do a system scan and save a log file.
When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here please use the [Add Reply] button below.
Please use the IPB Image Button below to reply.
——————–
Want to help others? Join the ClassRoom and learn how.
I don't answer HJT logs by email or PM.
Ad-Aware SpyBot HijackThis CWShredder SpywareBlaster Free on-line Scan
If you wish, you may donate to the forum.
User is online!Profile CardPM
Go to the top of the page
+Quote Post
V Full Edit
V Quick Edit
« Next Oldest · Old Un-Resolved HJT Logs · Next Newest »
Reply to this topicStart new topic
1 User(s) are reading this topic (0 Guests and 0 Anonymous Users)
1 Members: bigalt
Forum HomeSearchHelpSelf Help: (New computer users please use the HiJackThis logs forum for help) |– Self Help Fixes for Slyware |– Security Related Self Help Tutorials |– If You Need Help with Self HelpHijackThis / Computer Help |– HijackThis Logs and Spyware/Malware Removal |– Other Computer Problems |– Resolved HijackThis Logs |– Old Un-Resolved HJT LogsLinks and Updates |– OPEN (Not for computer help, this is for open news and talking) |– Computer Related Web Links |– Updates To Software |—- Archive Old Updates |– WolfchatTomCoyote Forum News And Suggestions |– Comments and Suggestions |– TomCoyote News |– Computer TipsTest |– Test
Display Mode: Standard · Switch to: Linear+ · Switch to: Outline
Track this topic · Email this topic · Print this topic · Subscribe to this forum
-
TomCoyote HJT Forum
IPB 2.1 (Not Default)TomCoyote (default)
English
Lo-Fi Version 0.0808 sec 0.05 10 queries GZIP Enabled
Time is now: 24th February 2007 - 05:57 PM
The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
© 2007 Geeks to Go, Inc. | All Rights Reserved | Privacy Policy
Skin: forum informatique
Invision Power Board v2.1.7 © 20
