Trojan.BHO.H

[expectingsydney]

I run Windows Vista and have not been able to get rid of this virus. I run Microsoft Forefront as my primary anti-virus protection, however this program did not pick up this trojan on any scan, Malawarebytes did (trojan.BHO.H). I ran Malaware and the log created stated that it was successfully removed and quarantined, and asked me to reboot. I did, reran the Malaware scan, and the trojan is still there. I contacted Malaware, and the tech there had me run hijackthis and avenger with all scans showing the virus still there. I found the application in the control panel, but I have no idea if uninstalling that program will remove the virus. The program runs itself off Internet Explorer add ons, which list it as disabled, but accessed even as recently as today. The trojan program itself shows that it was downloaded nearly 8 months ago (which freaks me out a little, considering I do online banking). We experience no pop-ups, no system slow down, etc.

I have no idea how to proceed in getting rid of this virus other than reinstalling my operating system, which I only want to do as a last resort.

[crunchie]

Hi and welcome to the VDr forums .

=========

Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Download the update from here if you have problems.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Make sure that you restart the computer.

===========

After the reboot, scan with hijackthis and save the log. Post it back here.

Please do not attach the logs, but paste them in with your reply.

===========

FYI. The Avenger is a tool that is used to delete files and registry entries, amongst other things. Although it does scan for rootkits, it is not designed as a scanner.