c:\windows\system32\comcatg.dll\[UPX]

Viruses and worms
1

Avast home edition detected this Trojan on windows xp but can’t remove it. The file can’t be deleted even in safe mode. I’ve tried several other scanners but nothing can touch it. Any ideas?

I think it’s a Trojan that tries to get me to buy it’s Trojan cleaning software but I didn’t catch the name.

2

I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on.
  4. Use AVG Antispyware; SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest AVG or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.

If you need, you could use Unlocker (http://ccollomb.free.fr/unlocker/) or KillBox (http://killbox.net/) or Delete FXP (http://www.jrtwine.com/) to delete that files.

3

Hi, how to eliminate c:\windows\system32\comcatg.dll[UPX] see http://forum.swzone.it/showthread.php?t=95898 (with COMBOFIX). Good luck :slight_smile: