Help! Win32/Conhook.d Trojan

[ryanbatc]

My wife's PC picked up the Win32/Conhook.d trojan somehow.

I've googled it but nothing seems to work, or isn't very specific as to how to get rid of it. Anyone out there who can help?

Thanks

[juneau]

What have you tried so far to remove it?

[ryanbatc]

Not much at all actually. I've spent most the time googling help on it

I found one site:
http://www.webuser.co.uk/forums/show...iew/collapsed/

But that method didn't work because I couldn't locate the pnmll.dll files at all

I tried going into safe mode for that and having windows defender remove the file - no joy.

what about specific software that could actually remove it? does any exist? Defenders not going to do it, the trojan implants itself into the registry.

How bout this Sophos program? Ever heard of it?
http://www.sophos.com/security/analy...jconhookc.html

[th3st1ck]

Most antiviruses should be able to remove it. Look into Kaspersky, Norton, BitDefender, NOD32, or AVG which is free.

[juneau]

Try running Trend Micros Housecall scan. Make sure system restore is disabled. If you have no luck with that. Try running the scan in safe mode.

[ryanbatc]

I ran Vundofix and that found a few of the associated DLL's, but it wasn't able to delete all of those....

What do you guys think about a reformat? Back up her critical data first? Would backing up her basic word files and pics possibly allow the backup disk to be infected with the Conhook too?

Her PC really needs a fresh spring cleaning anyway, it was slow before this lol!

Honestly, all the time I spending to fix this seems like it would be easier to just format it

edit_ oh, I've put Bitdefender on hers and mine..... I could run that too

[juneau]

Scan the files you wish to backup. If they're clean then go ahead and make the backup and reinstall windows.

[ryanbatc]

formatted it, all back to normal.....and it's faster yay!