Trojans and adware problems

[Tefler]

Norton has identified three threats, but it says it can't delete them. They are:

filename - qizma.exe Adware.targetsaver

filename - qizmm.exe Adware.targetsaver

filename - z00096.exe Adware.ZQuest

An Xoftspy scan has also found a Trojan file. The 'Vendor' is named as Troj/Ddloader-CC in the object c:\windows\toolbar.exe and a 'Trojan Registry value' object software\microsoft\windows\currentversion\run\shell.

What are these things? Should we be worried? How do we get rid of them?

[sp1814]

Had the same thing with my Norton 2004 Internet Suite. I upgraded recently (to 2006) and Norton was able to delete all spy/adware.

Have you tried downloading the very latest anti-virus files?

[Tefler]

We're using Norton Internet Security 2005 and yes, we've done Liveupdate - it's all up to date.

Still need help getting rid of these things - or don't they matter?

[sp1814]

Tefler

Okay - you could try the advice at the following link:

http://www.claymania.com/removal-trojan-adware.html

Your suspicion about thr Trojan horse is probably well founded. I got this from Wikipedia:

A destructive program that masquerades as a benign application. Unlike viruses, Trojan horses do not replicate themselves but they can be just as destructive.

One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.

[sp1814]

Tefler

I've found some more information about the Trojan horse:

Side Effects:

Deletes files off the computer
Downloads code from the internet

[sp1814]

Tefler

GOT IT!!!

Right...you know you said that you had three adware files that couldn't be removed? Well, I think the reason you can't remove them is because of the Trojan horse.

This is what I found at the following link:

http://labs.paretologic.com/spyware.aspx?remove=Troj/Dloader-CC

Troj/Dloader-CC is a downloader Trojan which tries to download and install new executables and disable/remove existing software (typically undesirable software such as adware).

I interpret that as meaning that it will prevent you from removing adware.

The good news is that from the link above, you can download XoftSpy which will get rid of the Trojan. After that you should be able to get rid of the adware files.

Good luck!

[Thewiseman]

Try the free scanner (bottom right of homepage) at www.xblock.com

[Tefler]

Thanks, SP and Wiseman. Using your advice as a launchpad, I found Hitmanpro2, which seems to have identified and sorted most of the problems on what seems to have been a very sick computer!

[birdie1971]

When using Norton, always boot in Safe mode before initiating a scan - many trojans and viruses cannot be removed easily while all the normal Windows services are running.