Hello,

I happened to spot "Trojan.Win32.Inject.ajnw" accidentaly, when I looked at detailed reports of KAV.
Strangely, KAV doesn't find this Trojan during the full scan.

I received help from richbuff three weeks ago to delete another Trojan (Packed.Win32.TDSS.z). Now, when I look at my detailed report for last one month, I see that Trojan.Win32.Inject.anjw had been already back then on my computer. It looks like this "Win32.Inject.ajnw" was not being deleted like the other trojan. But Kaspersky has not made any kind of alert, neither back then nor now. This is strange. Now I don't know how to delete this one.
Could you help me out, please?

Haaser

other notice: My Interent connection has been running slow lately, and every time I open Windows I get a message that PC Tray toolbar cannot be opened because some file is missing. I have been receiving this error message since the disinfection of Packed.Win32.TDSS.z with combofix three weeks ago. but this didn't cause me any harm so I left it be. Is it possible this error would be caused by the trojan?.

and here's the syscure-file:

Please post screenshot of the PC tray message.

Those are not showing up in Active Threats?

Navigate to the Windows/temp folder and delete the contents.

Clear the quarantine folder by: Quarantined > right click an item > select Clear list.

Clear the Detected list: Detected > Active threats > right click > Disinfect all > right click > Clear list > then scan again. Any detections?

nope, still nothing in active threats.
But I got the following notifications from KAV during the scan: see "recovery.jpg" & "hidden.jpg". Now I remember seeing them also during the full scan that I did a couple of days ago.

Uninstall Spyware Doctor. If it is already uninstalled, you can use Ccleaner to clean up its leftovers.

Ignore the "recovery.jpg" item. Ignore the hidden item, too.

Hello richbuff,

Thanks. The clearing of Quarantine folder and Detected list helped. No more critical events about the Trojan. And I have now used Ccleaner to remove the uninstall of Spyware Doctor (I removed the program itself before)
Now I still receive the message: "Protection is not running". (see the screenshot)
what could possibly cause this?

And another thing: Kaspersky Web AV spotted a Trojan at the Internet site of Uni Frankfurt. Should this be informed somewhere/someone?
(see the screenshot)

If the times that you receive the Protection message is proximal to the time that you start or shut down the PC, then you can ignore it.

Send the link to the lab, instructions are located in the third Important topic.

Everything's working just fine now, except I still get the error about "pctsTray.exe".
I guess that could be ignored, then. Thanks a lot for your help!

Haaser

Did you uninstall PCTools SpywareDoctor? Uninstall any and all PCTools applications.

Please create gsi sysinfo text, and then upload it to this parser site: http://gsi.kaspersky.fr/ and then post the link to the GSI report which may identify issue area, instructions see: http://forum.kaspersky.com/index.php?showtopic=36444 Please use the New 4.0 GSI utility. If Vista or W7, right click getsysteminfo.exe and select Run as administrator.

I thank you for the help you have provided me with, richbuff.

A few days ago my trial license with Kaspersky ended (I'm going to receive a licensed Kaspersky Internet Security soon), so I installed F-secure for the time being. Somehow this totally froze my computer from working. Every time I logged in, the Windows stopped working. Apparently, there was some conflict between the programs that I was unable to solve. That's why I decided to re-installed my Windows today after being totaly unable to start my computer for 3 days (there wasn't even a restore point to use, since I had not turned automatic system restore point on after deleting the trojans a month ago my bad. ).

But about the Spyware Doctor, I didn't uninstall any PCTools applications. So I assume this could indeed have caused the pctsTray problem.

Anyway, I'm waiting to get my Kaspersky Internet Security and start surfing safely soon. Your program is absolutely the best antivirus I've ever used.

Haaser

Just a suggestion: You could trial KAV and use windows firewall until you get the commercial license for KIS.