Ad: Manage updates with the Download App
ie8 fix

Spyware, viruses, & security forum: Trojen Horse Lockscreen.AR

by: classylu December 20, 2012 8:52 PM PST

Like this

0 people like this thread

Staff pick

Resolved question

Trojen Horse Lockscreen.AR

by classylu - 12/20/12 8:52 PM

This trojan horse has embeded itself in
C:\windows\system32\rundll.exe (2456):\memory-01520000
Core
It says : Object is inaccessible
How can I fix this?
It says the computer/file is infected.
Help Please.

classylu has chosen the best answer to his/her question.
Click here to view the answer that was selected.


classylu has chosen the best answer to his/her question!
Click here to view the answer that was selected.

Answer This
Ask for clarification
Report offensive post
Email to friend
Answers
Answer Best answer as chosen by user classylu

Similar to your dad's problem?

by Carol~ Moderator - 12/21/12 7:24 AM

In Reply to: Trojen Horse Lockscreen.AR by classylu

classylu..

I see you posted this last night, along with another post asking about ransomware (Citadel/Reveton) your dad had a problem with. Is this a different computer, or a duplicate post with the same problem?

Please see: Remove the FBI Online Agent Ransomware (Uninstall Guide)

Note where it says:

'Please remember that this is a computer infection and that the FBI is not locking your computer, so please do not be worried about the messages in the lock screen. This infection is detected by a variety of anti-virus vendors using the Trojan:Win32/LockScreen'

'Symptoms that may be in a HijackThis Log: O4 - HKCU\..\Run: [dllexp] rundll32.exe "%AppData%\dllexp.dll",exp

There are various other ways of removing it, if the two methods prove unsuccessful. If this post is a separate issue than your dad's, kindly post back (with details included) and let us know.

Best of luck..
Carol


Was this reply helpful? (1)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Thank you!

by classylu - 1/11/13 12:31 PM

In Reply to: Similar to your dad's problem? by Carol~ Moderator

Your removal advice worked. So far the trijan horse has not apeared again. I have my fingers crossed that it won't.
I appreciate your help enormously!!
Lucille


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend
Answer Best answer as chosen by user classylu

Try

by Blue_Zee - 12/21/12 4:20 AM

In Reply to: Trojen Horse Lockscreen.AR by classylu

Running the Microsoft Safety Scanner.

Details about the malware:
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Trojan%3AWin32%2FLockScreen
http://go.eset.com/us/threat-center/encyclopedia/threats/win32lockscreenar/


Was this reply helpful? (1)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Forum Icon Legend

  • UnreadUnread
  • ReadRead
  • Locked threadLocked thread
  •   
  •   
  •   
  •   
  •   
  •   
  •   
  • ModeratorModerator
  • CNET StaffCNET Staff
  • Samsung StaffSamsung Staff
  • Norton Authorized Support TeamNorton Authorized Support Team
  • AVG StaffAVG Staff
  • avast! Staffavast! Staff
  • Webroot Support TeamWebroot Support Team
  • Acer Customer Experience TeamAcer Customer Experience Team
  • Windows Outreach TeamWindows Outreach Team
  • DISH staffDISH staff
  • Dell StaffDell Staff
  • Intel StaffIntel Staff
  • QuestionQuestion
  • Resolved questionResolved question
  • General discussionGeneral discussion
  • TipTip
  • Alert or warningAlert or warning
  • PraisePraise
  • RantRant

You are e-mailing the following post: Post Subject

Your e-mail address is used only to let the recipient know who sent the e-mail and in case of transmission error. Neither your address nor the recipient's address will be used for any other purpose.

Sorry, there was a problem emailing this post. Please try again.

Submit Email Cancel

Thank you. Sent email to

Close

Thank you. Sent email to

Close

You are reporting the following post: Post Subject

If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

Offensive: Sexually explicit or offensive language

Spam: Advertisements or commercial links

Disruptive posting: Flaming or offending other users

Illegal activities: Promote cracked software, or other illegal content

Sorry, there was a problem submitting your post. Please try again.

Submit Report Cancel

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

You are posting a reply to: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Duplicate posts are not allowed in the forums. Please edit your post and submit again.

Submit Reply Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close

You are requesting a clarification of the question: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Submit Clarification Request Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close

You are posting an answer to the question: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Submit Answer Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close
close

Click here to be notified via e-mail when someone submits an answer.

Would you like to resolve this question? close

Based on your response, it looks like this question has been answered.



Sorry, there was a problem resolving this question. Please try again.

Resolve Leave unresolved