sp2ctr.exe = DLUCA-M TROJAN ???
-
My dad's pc got the following trojan, or at least that is what the scanner says but it can't clean or delete it because it says it is in use and cannot be deleted.
Anyone knows how to remove it?
Thanks -
Windows XP? Boot safe mode, do the scan and clean.
-
Doesn't seem to show up in norton. I used trendmicro. Can I still use trendmicro in boot safe mode?Originally posted by ditzy:Windows XP? Boot safe mode, do the scan and clean.
Yes it is Windows XP -
give me ur email.. i send you the trojan remover with serial number
-
Really send me remover or send more trojans overOriginally posted by kingofbeholder:give me ur email.. i send you the trojan remover with serial number
I don't use that pc wan hor
-
make ur bet lohOriginally posted by elindra:Really send me remover or send more trojans over
I don't use that pc wan hor -
Extracted from: http://startup.iamnotageek.com/srch-sp2ctr.exe.html
This is NOT a list of tasks/processes taken from Task Manager or the Close Program window (CTRL+ALT+DEL) but a list of startup applications, although you will find some of them listed via this method. Pressing CTRL+ALT+DEL identifies programs that are currently running - not necessarily at startup. For a list of tasks/processes you should try WinTasks 5 Standard/Professional from LIUtilities or the list at AnswersThatWork. Therefore, before ending a task/process via CTRL+ALT+DEL just because it has an "X" recommendation, please check whether it's in MSCONFIG or the registry first. An example would be "svchost.exe" - which doesn't appear in either under normal conditions but does via CTRL+ALT+DEL. If in doubt, don't do anything.
Read Disclaimer also.
Plus, it's most likely due to adware/spyware entering the system
-
Then windows xp safe mode, find that *.exe manually, delete into recycle bin. Reboot and check if everything's normal then flush it away for good.
-
Most likely death. Dunno what my dad downloaded again. Heng I never let him touch my pc >.<
-
Whenever my comp gets struck with a virus, worm, spy or whatever, my solution is very simple. Since my hard disk has been partitioned and since all my data is in D: drive, i will just format my C: drive and reinstall windows XP and microsoft office. It works everytime for me.
-
When first run Troj/Dluca-M copies itself to the Windows system folder as sp2ctr.exe and creates the following registry entry, so that sp2ctr.exe is run automatically on startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\
sp2ctr = %SYSTEM%\sp2ctr.exe /nocomm
Registry entries are also created under:
HKCU\Software\sp2ctr\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sp2ctr\
Troj/Dluca-M can be uninstalled via the Add or Remove Programs dialog in the Windows Control Panel (Start -> Settings -> Control Panel -> Add/Remove Programs by selecting "sp2ctr" from the list.
Info extracted from: http://www.sophos.com/virusinfo/analyses/trojdlucam.html
Ehm...to undo the hassle, why not get a cleaner to solve the problem?
-
It's time to put in spy/adware blockers, internet firewalls and antivirus programs on the computerOriginally posted by elindra:Most likely death. Dunno what my dad downloaded again. Heng I never let him touch my pc >.< -
sending now to you..if problem still cannot solve..post again.
-
I used trendmicro but since it is running I didn't manage to clean or delete it la.
Later than go and try. He turned off that pc liao. -
Thanks but I will only do it tomorrow coz I'm hitting the sack soon and I think due to all the nonsense in the PC it takes forever to boot up again, PLUS I have to walk to another roomOriginally posted by kingofbeholder:sending now to you..if problem still cannot solve..post again.
Not that never install scanner, firewall etc. -
haha..no firewalls surely for home user!Originally posted by deathscythe99:It's time to put in spy/adware blockers, internet firewalls and antivirus programs on the computer -
Thank you guys
If everything fails tomorrow evening I will post again -
I put it a must to have adaware and spyware blockers....they are damn malicious nowadays, compared to a year or so ago....Originally posted by kingofbeholder:haha..no firewalls surely for home user!
-
If everything does fail, you won't be posting ever again.Originally posted by elindra:Thank you guys
If everything fails tomorrow evening I will post again -
Please la that is on my dad's pc not mine.Originally posted by ditzy:If everything does fail, you won't be posting ever again. -
Viruses, worms, trojans are all named for a reason.
-
whoa lao wei your dad use your PC for porn, better check whether the keyboard sticky or not.Originally posted by elindra:Most likely death. Dunno what my dad downloaded again. Heng I never let him touch my pc >.< -
Porn your head. He downloads games from the internet to play and all sort of weird stuff.Originally posted by the.raven:whoa lao wei your dad use your PC for porn, better check whether the keyboard sticky or not. -
Even with all these in place, my sister's pc still got infected with a popup ad. Nothing is detected through scanning. How huh?
Originally posted by deathscythe99:It's time to put in spy/adware blockers, internet firewalls and antivirus programs on the computer -
I classify BDSM and beastility under "weird".Originally posted by elindra:Porn your head. He downloads games from the internet to play and all sort of weird stuff.