The Impossible Trojan!

jonaldo · 09-11-2008, 07:59 AM

Ok,
so my computer has been infected with a trojan virus called RTKT_STITCH.D
I did a little reading up on it to find out how to remove it as my antivirus software is unable to do so.
Anyway, i have been recommended to use trend-micro's House-call.
but the problem is, the trojan has hijacked my internet browsers,

When i try access internet sites such as house-call, it disconnects me from the internet and everything i google gets redirected to another random advert site.
I am using a different computer to type this as i couldn't even access this website.

I've tried to download the software mentioned in the 5 Steps.. thread.... The Panda one, but once again i cannot access the site...

How am I supposed to get rid of this??????

Help would be very much appreciated

Banscare · 09-11-2008, 08:13 AM

Can you download the program on that computer, put it on a flash drive or CD or something and load it on to the infected computer that way?

tetonbob · 09-11-2008, 10:41 AM

This rootkit infection works to prevent access to many AntiVirus and help forum URLs.

As mentioned in the 5 Steps thread:

Quote:

It is appreciated that the level of infection may not allow you to complete all these steps. Therefore, if for some reason you cannot perform one of the steps, move on to the next step and advise the Analyst accordingly when you post the requested logs.

If you cannot access the internet on the affected machine at all, do as Banscare has suggested. Go to Step 5, and download HijackThis from the different computer you're now on, carry HijackThis to the affected machine, run HijackThis and save a log, copy the log to USB device and carry it back to the clean machine you're using for communication, then create a new thread in the HijackThis Log Help forum and post the log.

Please download HijackThis to your desktop

Alternate link

This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file in the HijackThis Log Help forum, not here. Do not fix anything in HijackThis since they may be harmless.

---------------------------------------------------------------------------------------------

09-11-2008, 07:59 AM	#1 (permalink)
jonaldo Registered User Join Date: Sep 2008 Posts: 1 OS: Xp	The Impossible Trojan! Ok, so my computer has been infected with a trojan virus called RTKT_STITCH.D I did a little reading up on it to find out how to remove it as my antivirus software is unable to do so. Anyway, i have been recommended to use trend-micro's House-call. but the problem is, the trojan has hijacked my internet browsers, When i try access internet sites such as house-call, it disconnects me from the internet and everything i google gets redirected to another random advert site. I am using a different computer to type this as i couldn't even access this website. I've tried to download the software mentioned in the 5 Steps.. thread.... The Panda one, but once again i cannot access the site... How am I supposed to get rid of this?????? Help would be very much appreciated

09-11-2008, 08:13 AM	#2 (permalink)
Banscare Registered User Join Date: Jun 2008 Location: St John's NL Posts: 190 OS: XP Pro 64bit My System	Re: The Impossible Trojan! Can you download the program on that computer, put it on a flash drive or CD or something and load it on to the infected computer that way? __________________ Ban Computer Support Specialist (MCP, MCSE)