trojan here to stay

Viruses and worms
1

Please can anyone help me remove this trojan from my pc
its called backdoor.ruledor and no matter how many times I think i’ve got rid of it,. it re-appears the next day!!
I,ve found it in c/program files/clearsearch/csie.DLL.
Any ideas

2

You may try using Ad-aware 6 and SpyBOT 1.3.
You can find both on my page.

3

THANKS :slight_smile: i think i may have cracked this. went to your site and downloaded both od them and FINGERS CROSSED things seem okay so far.

4

Hehe i knew it :slight_smile: ClearSearch is classified as spyware (homepage hijack if we are precise) :wink:

5

:frowning:
Sorry, spoke too soon. ??? :-X I tried disabling system restore, starting up in safe mode, running Adaware and Spybot s+d, AVG, AND Norton AV.Whicj found and deleted this. Re-booted etc and everything seemed fine. But this morning its back. Any more suggestions

6

Hi,

is it found in the same location, i.e.:
c/program files/clearsearch/csie.DLL ?

you probably get reinfected via security holes in Windows& InternetExplorer(IE) and/or some Share/freeware program bundled with the above AdWare (Clearsearch)

read here:
VGREP

Please

  • post a logfile of hijackthis: http://hjt.klaffke.de/en (extract the EXE into a new empty folder before running it…)

  • Delete the entire folder c:\program files[b]clearsearch[/b]

  • make SURE you have all Windowsupdates applied!!

  • secure your IE better:
    Disable activeX & scripting except for known, SECURE sites

  • Blocking of lots of malware targeting the security holes in IE can be done with Spywareblaster from javacool

use board-seach and google
:wink:

7

Oh i recommend that you use Opera or Mozilla based browser. Much faster with more configurable interface and better security against such nastys.