[Got-2-trojan-horses D:]

My "AVG Free Edition keeps detecting 2 trojan horses everytime i grant acces to winlogon (i think that's what it's called) with my Norton.

In my vault there is two files

#1
----
Virus Name: Trojan horse Downloader.Zlob.AJL
Path: C:\windows\system32\atmclk.exe
File size: 10,77 KB

#2
----
Virus Name: Trojan horse Generic.UJX
Path: C:\windows\system32\oerucu.dll
File size: 172 KB

every time i remove them, they just appear again D:

my startup site in Internet Explorer is also changed to www.topsecuritysite.com
every time i change it back to my old startup site, nothing happens, www.topsecuritysite.com is still my startup site now D:

There's also two icons bot in "All Programs" (note that it is directly taken from danish to english) and on my desktop.

The icons are links to "freetestonline.net" and "onlinesecuritysolution.net"

please help me... i'm a total newbie at this... it's my aunts computer and she's really pissed of right now

[Advertisements]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.

[gerryf]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.

[Richard John]

It's most likely WinIogon, not WinLogon. This is a trojan that uses a similar name to WinLogon to trick you.