ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Clamwin does not identify a ' QQRob malicious trojan '
friday3D


Joined: 18 May 2006
Posts: 6
Reply with quote
Clamwin does not identify a "QQRob malicious trojan" on a Windows Server 2003 system.
Spybot Search and Destroy did find it.
When I make Spybot remove it, that does not work.
After rebooting and re-scanning, Spybot finds it again.

How can I remove this "QQRob malicious trojan" completely?
View user's profileSend private message
QQRob
GuitarBob


Joined: 09 Jul 2006
Posts: 4644
Location: USA
Reply with quote
I Googled the info below from www.spywareguide.com/product_show.php?id=2851. It is nasty spyware. Not all antivirus software addresses spyware. F-Secure spots it for sure--don't know if it removes it, but the the free Ad-Aware from Lava Soft might. The free Windows Defender antispyware product from Microsoft might also remove it. Supposedly manual removal info is below. Good luck.



Comment: QQRob is a password-stealing trojan. It also has the ability to disable anti-virus products and security related utilities.

This trojan modifies the registry entries so that it executes whenever any text file(*.txt) is opened.

This trojan blocks access to certain sites by altering the hosts file in Windows.

Manual removal: 1. Click Start > Run.
2. Type regedit
3. Click OK.
4. Navigate to the subkey:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

In the right pane,modify the value:
"(Default)" = "C:\WINDOWS\system32\impai.exe "%1""
to
"(Default)" = "%SystemRoot%\system32\NOTEPAD.EXE %1"
5. Close the Registry Editor.
Properties: Adds other software
Attacks security software
Connects to the internet
No EULA present
No standard Uninstaller
Stealth Tactics
View user's profileSend private message
friday3D


Joined: 18 May 2006
Posts: 6
Reply with quote
Thanks, GuitarBob.

I will give this a shot.
View user's profileSend private message
Clamwin does not identify a ' QQRob malicious trojan '
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic