metajuan trojan impossible to remove

[goldengirl]

Hello all,

I have been trying to get rid of the metajuan trojan from my laptop but it just will not go away. I have attempted to delete a .dll i think is associated with it as well as followed the instructions of disabling the system restore, booting in safe mode, running norton360, looking in the registry for this

"HKEY_CLASSES_ROOT\CLSID\68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}\InprocServer32\"Default" = "%Temp%\[NAME OF TROJAN EXECUTABLE].dll"

Next, the Trojan creates the following registry subkey in order to register itself as a Browser Helper Object:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}"

but could not find it.

and re-running the scan in normal mode and BANG there it is again.

Not sure where to go from here. Does anyone out there have any recommendations. Help Please.

 

[Bodaggit23]

How in the world did Norton let this get through?

Anyway, I don't know if there is any good way of getting rid of
a virus while leaving your OS intact.

I have and always will suggest you back up your files and reinstall
your Operating System.

There's no other 100% guaranteed way to know for sure that it's gone.

Someone else may have more optimism for you.

 

[johnb35]

Hello all,

I have been trying to get rid of the metajuan trojan from my laptop but it just will not go away. I have attempted to delete a .dll i think is associated with it as well as followed the instructions of disabling the system restore, booting in safe mode, running norton360, looking in the registry for this

"HKEY_CLASSES_ROOT\CLSID\68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}\InprocServer32\"Default" = "%Temp%\[NAME OF TROJAN EXECUTABLE].dll"

Next, the Trojan creates the following registry subkey in order to register itself as a Browser Helper Object:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68D5CF1D-EC5C-4bdd-A9EF-F0E517565D50}"

but could not find it.

and re-running the scan in normal mode and BANG there it is again.

Not sure where to go from here. Does anyone out there have any recommendations. Help Please.

Please follow the steps in this thread and post the requested logs for us.