Pesky TROJAN virus won't go away.

Damon

unread,

Nov 21, 2009, 10:59:01 PM11/21/09

to

Some time ago I ran a bad app on my PC and have since been stuck with this
pesky Trojan Horse Agent in my system32 folder called "tflcmd.dll" and no
matter how many times I run an AVG scan the damn thing keeps coming back,
popping up every hour or two to interrupt whatever it is I'm doing, crashing
my applications and such.

Does anyone have any idea how to get rid of a pervasive Trojan virus?
Because AVG and every other anti-virus program I've tried has certainly
proven quite useless-- they only quarantine, not remove. Which is cute, but I
need a program by a non-coward developer. You know, that actually removes
viruses. I know, crazy right? :p

D

Damon

unread,

Nov 21, 2009, 11:00:02 PM11/21/09

to

Mark Adams

unread,

Nov 21, 2009, 11:03:01 PM11/21/09

to

"Damon" wrote:

Run Malwarebytes and Superantispyware.

Bruce Hagen

unread,

Nov 21, 2009, 11:07:08 PM11/21/09

to

"Damon" <Da...@discussions.microsoft.com> wrote in message
news:098D5884-48D2-491D...@microsoft.com...

You can give this a shot.

Malwarebytes Anti-Malware 1.40
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
--

Bruce Hagen
MS-MVP Outlook Express
Imperial Beach, CA

Jose

unread,

Nov 21, 2009, 11:33:00 PM11/21/09

to

One scanning tool is generally not enough - no single one seems to
know everything and I would not count on AVG (IMHO).

I would start here:

Perform some scans for malicious software first, then fix any
remaining issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

PA Bear [MS MVP]

unread,

Nov 22, 2009, 2:37:55 AM11/22/09

to

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including unwanted
software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1

Also available via...

Consumer Security Support home page
https://consumersecuritysupport.microsoft.com/

Otherwise...

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan (only!)
in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

2b. Vista or Win7=> Run this scan instead:
http://onecare.live.com/site/en-us/center/whatsnew.htm

3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here.

Checking for/Help with Hijackware:
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
www.banthecheck.com

db

unread,

Nov 22, 2009, 9:20:11 AM11/22/09

to

firstly, I would try "process explorer"
and see if the nasty can be tracked
down to its parent folder.

--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com
- nntp Postologist
~ "share the nirvana" - dbZen

~~~~~~~~~~~~~~~
>
>

"Damon" <Da...@discussions.microsoft.com> wrote in message
news:098D5884-48D2-491D...@microsoft.com...