|
|
What’s about Trojan horse Clicker.AJRO
AVG discovered this “Trojan horse Clicker.AJRO” on my PC yesterday but could not remove it.
Infection: Trojan horse Clicker.AJRO
Object: c:\System Volume Information\Microsoft\services.exe
Result: Object is inaccessible
Infection: Trojan horse Clicker.AJRO
Object: c:\System Volume Information\Microsoft\smss.exe
Result: Object is inaccessible
It appears to open 3-4 iexplore.exe every 30mins and tries to connect to a specific website. (I won’t post the link unless requested.)
Clicker.AJRO also turns my Wave volume down every so often too. Not every 30mins like the IE thing but every 12hrs ish it’ll turn the volume down every few mins for a while then go back to normal.
I’ve run Malwarebytes Anti-Malware, rkill, SuperAntiSpyware, and Spybot Search and Destroy and they pick up nothing. Hitman is the only thing to pick up two problems in the C:\System Volume Information\Microsoft folder. I’ve gained access to it by changing view and security settings and tried to manually delete the two files (which are labeled as “File Loaders” and “Black Internet”). It always says ‘access is denied,’ even when using Unlocker. Any attempt to delete upon reboot using Unlocker hasn’t worked.
Sorry,Until now no tool could fix the problem(included mbr.exe from Gmer).
It’s a MBR infected virus.
|
|
XueTr will alter that “a mbr rootkit infected”,But in my test, Partition Table was broken after xuetr fix it.
So it is very dangerous that normal folks use it to remove the virus.
David 
john 
pJohn 
Coypu 
on 
David
Reply:
July 21st, 2010 at 8:08 am
Hi John, thank you for that.
To fix the MBR can i put the XP disc in and select recovery consolse and then type fixmbr? Would i also need to fixboot? OR am i sounding like an idiot and actually take it to a tech guy?
Reply