unknown trojan - “Your computer was infected by unknown trojan” Error Removal Process
January 1, 2008 – 4:07 pmUnknown Trojan Explanation
unknown trojan is a new warning message that introduced by a rogue anti-spyware program such as IE Defender or Files Secure, which is a form of fake malicious software engineered by Internet hackers. It is a variant of Trojan.Win32 or Trojan.Win32.agent.akk or Trojan.Win32.Patched, or Trojan.Win32, or Trojan.Win32.Qoologic. “System Error! Your computer was infected by unknown trojan. It’s dangerous for your system (critical files can be lost)!” error message might appears in your screen.
unknown trojan is not a virus by itself, but it is part of a fake anti-spyware program. Do NOT purchase unknown trojan-related software under any circumstances since it is a fake anti-spyware software.
Are you getting popups from Unknown Trojan? Have you identified that you have Unknown Trojan installed on your computer? Do you wish to remove Unknown Trojan completely from your computer?
Why should you remove Unknown Trojan?
If Unknown Trojan resides on your computer, it can potentially damage your personal files or you may end up losing data stored on your system. Research has shown that Unknown Trojan may have the ability to make your computer vulnerable to remote attacks which could result, initially, in loss of money, possibly identity theft, and, eventually, a painstaking Unknown Trojan removal process.
How can you manually remove Unknown Trojan
Manual removal of Unknown Trojan may not be for everyone. Each manual Unknown Trojan removal step must be followed delicately to completely remove all related files and registry entries from your computer. If you are unsure or have doubts about editing your system registry, then we recommend that you use the automatic Unknown Trojan removal process.
Unknown Trojan can be removed manually by following the steps below.
- With all programs closed, click the Start Menu and go to the Control Panel.
- Locate the Add/Remove Programs icon and double click it.
- Locate Unknown Trojan in the list of programs. If you find it, select it and remove it. If you cannot find Unknown Trojan, you can continue to step 5.
- Restart your computer.
- Close all open programs and windows on your desktop.
- Open your registry editor (regedit) program by going to Start Menu, type in regedit, and click OK.
- Find all of the following registry entries and delete them. If you do not know how to do this, then you can read how to edit the registry in Windows.
55E04179-C2DF-4D7F-B74E-3E644C983237
CA4F0D8D-5F2B-4F16-838A-8D52249EAB21
a60e765a-fd37-4529-bf73-cf805dfd84ea
8E015787-B1E3-404a-95DE-3E71E1FA0305
4AAC4708-FE47-4B80-92EF-47406444DDD2
3e0cee63-f8bc-4485-a745-cc01b2a0e9d9
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_LOCAL_MACHINE\software\classes\clsid\{549bc94f-06c7-db34-841d-44ebd1fd8f8d}
HKEY_CLASSES_ROOT\clsid\{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_LOCAL_MACHINE softwaremicrosoftwindowscurrentversion
HKEY_LOCAL_MACHINE softwareclassesclsid{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_CURRENT_USER softwaremicrosoftinternet explorer oolbarshellbrowser{9ee490a6-4079-7698-56ba-34c832f16bc9}
FF64059D-4D2A-4D6B-AA0F-2EE4A2FE3856
69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014
85589B5D-D53D-4237-A677-46B82EA275F3
4E7BD74F-2B8D-469E-A0E8-F479B685FA7D
F10587E9-0E47-4CBE-84AE-7DD20B8684BB
CAA8DC4B-648A-4C2F-8F2A-39E607830DEF
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\kind ooze
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\shellbrowser\{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_LOCAL_MACHINE\software\classes\clsid\{9ee490a6-4079-7698-56ba-34c832f16bc9}
9ee490a6-4079-7698-56ba-34c832f16bc9
HKEY_LOCAL_MACHINE softwaremicrosoftwindowscurrentversionexplorerrowser helper objects{549bc94f-06c7-db34-841d-44ebd1fd8f8d}
HKEY_LOCAL_MACHINE softwareclassesclsid{549bc94f-06c7-db34-841d-44ebd1fd8f8d}
HKEY_CLASSES_ROOTclsid{9ee490a6-4079-7698-56ba-34c832f16bc9}
44a5d01d-1dd0-4412-be7e-ce652025d433
369A87BB-07DF-4AB6-B23D-B5BF81338572
83CDEF6B-98D2-4C60-84FC-00C44606A4F8
3D50DBC0-414E-480F-9C5E-5DB9E4568EF7
7E24E909-FB8A-4837-9DF7-05E7587CB26C
4EBAA7B0-740D-4CFA-9455-5C233BB354E1
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{549bc94f-06c7-db34-841d-44ebd1fd8f8d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_CLASSES_ROOT\clsid\{549bc94f-06c7-db34-841d-44ebd1fd8f8d}
unkind ooze549bc94f-06c7-db34-841d-44ebd1fd8f8d
HKEY_LOCAL_MACHINE softwaremicrosoftinternet explorer oolbar{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_CURRENT_USER softwaremicrosoftinternet explorer oolbarwebbrowser{9ee490a6-4079-7698-56ba-34c832f16bc9}
HKEY_CLASSES_ROOTclsid{549bc94f-06c7-db34-841d-44ebd1fd8f8d} -
You may need to return to this removal process for removing Unknown Trojan. You can do this easily by bookmarking or adding a favorite to this page by clicking here. If you are using the FireFox web browser you can press the keys Ctrl and D simultaneously to bookmark this page.
Image 1. Bookmark PCHubs removal process
-
Delete all of the following files that are associated with Unknown Trojan from your computer.
tgfaifwm.dll
domnftwpto.dll
huriscos.dll
spads.dll
pdswin.dll
qomllji.dll
pwnbho.dll
dataclenu.dll
jkklm.dll
oggview32.dll
isfmdl.dll
phwh11m3.dll
pbukv2.dll
hsirziq.dll
vturppp.dll
poswin.dll
bone1.exebone1.exeIf you need a better understanding on how to search for these files then you can read how to find and search for files and folders here.
If you have issues deleting any of the previously listed files that are associated with Unknown Trojan, you can try rebooting your computer into safe mode. Booting into safe mode may allow certain malicious files to be deleted. If you are wondering how to boot into safe mode, you can read our process for starting a computer in safe mode here.
Image 2. Select “Safe Mode with Networking”
-
After locating and deleting the previous files you must remove all directories associated with Unknown Trojan by going to the C:\ProgramFiles\Unknown Trojan folder, select it, and delete it. In some cases you may not be able to find this directory. You can still continue to the next step.
-
Restart your computer. You do not need to boot into safe mode at this point. You should have removed Unknown Trojan completely from your computer. If you find that Unknown Trojan is still on your computer, you can repeat the steps again or go to the automatic Unknown Trojan removal process.
Automatically Remove Unknown Trojan
Automatically remove Unknown Trojan for free. Free automatic Unknown Trojan removal process.
Do you wish to automatically remove Unknown Trojan from your computer? Are you looking for a free method to remove Unknown Trojan from your computer? If so, you can utilize the free automatic Unknown Trojan removal process below. Each step is designed to aid in the use of the program SmitfraudFix, which is a free tool created by S!Ri to remove parasites such as Unknown Trojan. Just so you know there’s no guarantee that SmitfraudFix or any other spyware remover will remove Unknown Trojan completely. These instructions are provided as a guide and are to be used at your own risk.
-
Download the SmitfraudFix tool to your computer by using our free download link here. Save the downloaded file to your desktop.
Image 1. Save SmitfraudFix.exe
-
Restart your computer into safe mode. Safe mode will allow malicious files that are normally loaded into memory to be easily deleted by the SmitfraudFix program. Do you want to learn how to boot into safe mode? If so, you can follow our process on how to boot into safe mode here.
-
After booting into safe mode, double-click on the SmitfraudFix.exe icon that should be located on your desktop. Follow the on-screen instructions. Option number 2 should be selected once the program starts.
Image 2. Click on SmitfraudFix.exe icon
-
After SmitfraudFix performs the initial removal processes it will ask you “Do you want to clean the registry?” Select Y for yes.
Image 3. For “Do you want to clean the registry?,” select Y for yes
- Once SmitfraudFix has finished the registry clean you can restart your computer now.
- Unknown Trojan should be removed from your computer. If not, you can start the automatic removal process over. It may take more than one try in some rare cases.
There’s no guarantee that SmitfraudFix will remove all files due to the complex nature of new spyware files that are ever-changing. If necessary, you may need to get help from a person who knows about computer and spyware.
(Disclaimers: These instructions are provided to you for free and to be used at your own risk. The free removal process for Unknown Trojan is not guaranteed to work in all circumstances. We are not responsible for any damages.)
52 Responses to “unknown trojan - “Your computer was infected by unknown trojan” Error Removal Process”
I followed these instruction, and although this is a dos based program, it work great. Thanks,
By Louie on Jan 4, 2008
THANK YOU so much. I was freaking out I already had my hard drive ruined before with malicious spyware and I knew if I pressed ok to that odd “unknown trojan” pop up box message I was asking for trouble. I downloaded SmitFraudFix (because the manual instructions weren’t working for me) and it deleted the corrupted files successfully, I am so grateful. Thanks so much.
By Kelly on Jan 5, 2008
remove trojan win32 murlo virus
By umachotaray on Jan 6, 2008
thanks downloaded smitfraud it did the job perfectly, you the man
By Kam on Jan 7, 2008
Thanks worked perfectly and got rid of the virus . A pain in the ass virus fixed in seconds thank you again
By Marc on Jan 9, 2008
Im downloading this smitfraudfix i hope it works cuz i cant use my hotmail through internet explorer and now everything i click it opens that stupid pop up
By Darren on Jan 9, 2008
after hours of trying all this complicated regestry files bollo*s i found the answer to getting rid of that annoying pop up box, resetting IE settings back to their orrigional settings CONTROL PANNEL -> INTERNET OPTIONS -> ADVANCED -> RESET Simple as that!!!!
By Ste on Jan 10, 2008
SmitFraudFix worked for me after paying for Spy Sweeper based upon the Best Buy Geek Squad recommendation. Thanks!!!
By Tom on Jan 10, 2008
I had used Spybot which removed the IE Defender and misc stuff. Still had the nutty pop-up and hijacked web search. Followed Ste’s advice and reset the Advanced - internet options. Now I can surf porn in peace!
By psan on Jan 11, 2008
I tried a bunch of different things and went to this website and the SmithfraudFix did the job. Really awesome and easy way to remove that stupid pop-up. Thanks a lot!!!
By Ray on Jan 12, 2008
Tried Ste’s suggestion with Internet options, did not work til I rebooted. Used SmithfraudFix just to be sure it was gone from registry. Thank you PCHubs, SmithfraudFix & Ste!!
By asianmike on Jan 12, 2008
Tried Ste’s suggestion with Internet Options, didnt work til I rebooted. Ran SmithfraudFix just to be certain it was cleaned from my registry. Thank you PCHubs, SmithfraudFix & Ste!!!
By asianmike on Jan 12, 2008
I used “Ste” method and worked! thanks!
By Brian on Jan 13, 2008
After removing programs, deleting files, and registry keys i was still getting the pop up until i found this page, tried STE’s suggestion of resetting IE options and rebooting and finally got rid of all the messages.
By LTS Shoe on Jan 16, 2008
I bought spyware and it got rid of the corrupt files but that message is still popping up…..I went to internet options and reset the settings and restarted the computer but the message is still popping up…..any suggestions?
By Renee on Jan 17, 2008
I had the same problem and the SmithfraudFix worked great. Thanks
By Jodes on Jan 17, 2008
Great way to remove this annoying spy ware just follow this instruction: resetting IE settings back to their original settings CONTROL PANNEL -> INTERNET OPTIONS -> ADVANCED -> RESET Simple as that!!!!
By Ste on Jan 10, 2008
Thank you very much Ste
By NM on Jan 19, 2008
Using AVG Anti-spyware also works great to remove unknown spyware infections
By Kuljit Singh on Jan 21, 2008
This is the greatest thing since sliced pineapples in a can with extra juice.
By teddi on Jan 22, 2008
I have this trojan on my PC, I get that stupid error message every time I click something, and a porn site shows up in my google search results. I have tried everything on this page. Smitfraudfix doesnt work, I’ve tried it about 5 times. I cant find any of the regisrty keys, and none of the processes are running or installed on my PC. HEEEEEEEELP!!!!!
By andrew on Jan 22, 2008
thank you,ste
By tony on Jan 31, 2008
SmithfraudFix worked for me. Thanks a million.
By Steve on Feb 1, 2008
Thank you!Worked for my friend =)
By C.K on Feb 2, 2008
omg, thank you so much ste, i was really annoyed by that message popping up, and was very suspicious, i traced the ip, and did some research on it, and the ip it came from in frankfurt had some past complications, so thanks a lot, real glad i didnt buy into it, as its my dads computer lol
THANKYOU!
By regedit on Feb 7, 2008
Tried Ste’s advice of resetting Internet Explorer settings and rebooting - worked perfectly, cheers
By rob on Feb 11, 2008
thanks a million lot from a chinese girl.cheers
By hebehe on Feb 12, 2008
All i got to fucking say is thank god there is a forum on this shit cause it did the job perfectly no more popups SmithFraudFix is where its at i suggest anyone who has this same error problem to download it and follow the instructions
By BlunTman on Feb 12, 2008
omg thanks alot! SmitFraudFix didn’t work for me, i tried it three times! but Ste’s advice worked!^^ so its all good! thanks Ste! i can never thank you enough =)
By THANKS on Feb 13, 2008
hey the reset option in the IE settings works great , no problems anymore!!
By Shivi on Feb 13, 2008
Thanks!!!! it worked!
By jen on Feb 13, 2008
For me the reset option in the IE setting does’nt work. Smithfraud doesn’t work to. I don’t know what am I doing bad?:(((
By Rafal on Feb 14, 2008
Thank you so much!! It worked and no problems!! Thank you again!
By Mike on Feb 15, 2008
You the man dude, it took just a few seconds and it definately works.
By nemesis on Feb 17, 2008
it is brilliant. Thank so much indeed.
By Yam on Feb 17, 2008
THANK GOD for SmithfraudFix, I did a McAfee scan and it said it was a some low risk Trojan and couldnt help me get rid of it. But I followed the instructions on here and now my notebook is better then ever this site saved my computer.
-THANK YOU!!!!!!!!
By Dan on Feb 18, 2008
Thank you. Norton instructions didn’t remove anything and neither did anything else I tried.
By KDN on Feb 19, 2008
I tried the fast reset and it worked fine. Then ran the manual removal just to make it all go away.
My question is, if Norton etc. dont detect or deter it, how do you keep it and other trojans from coming back?
By Sammy on Feb 24, 2008
the reset option works great… i tried spybot search and destroy,spyware doctor, and a bunch of other shitty spyware removal tools… nothing seemed to work…. until now, that is…. thanks a lot… cheers!!!
Signed… a dude from Romania
By Raca on Feb 24, 2008
The reset works first time!! Don’t bother with the spybots etc!!
By Tom on Feb 25, 2008
thank you very much for the program. it worked!
By actunderdc on Mar 1, 2008
YES IT WORKED !!!! CRAIG is right
SIMPLE and easy way
I will put down the instruction once again here for those who are finding them confusing.
for Windows Vista:
1) In Internet Explorer click on “Tools” > “Internet option” > When the “Internet Option” Window pops up in the “General” tab under “Browsing History” click “Delete” when the ” Delete Browsing History” window pops up click on ” Delete all..” and then on the Delete window make sure to select ” Also delete files and settings stored by add-ons” and Click “YES”
2) On the same ” Internet Options” window now click on the “Advanced” tab and here you will see at the bottom of the wondow “Reset Internet Explorer settings” Click on the “Reset..” tab, confirm the Reset and Restart your computer.
3) Your problem is now solved, and make sure to share this information with other people who are facing the same error.
For Windows Xp
1) In “Internet Options” window under the “General” tab on “delete cookies and “Delete Files”
2) Then on the same “Internet Options” Window click on the “Advanvced” Tab and then click on ” Restore Default”
By HighTech on Mar 4, 2008
Hi All,
I tried with SMITHFRAUDFIX twice in safe mode and normal mode, but it didn’t work for me. Please help me on removing this nasty virus message.
By phanindra on Mar 5, 2008
DUDE!!! Thanks STE!! Control Panel -> Internet Options -> Advanced -> Reset FIXED THE PROBLEM!!!
By Pic on Mar 11, 2008
The fix tool worked perfect! THANKS!!!
By Chuck on Mar 22, 2008
OMG, Ste THANKS MAN…Going to CONTROL PANEL>INTERNET OPTIONS>ADVANCED>RESET worked like a charm. Wow, that was easy. That garbage happening in IE was so annoying too.
By Butch on Mar 24, 2008
THANK YOU so much!!! The Internet Options > Advanced > Reset worked beautifully, first time. I appreciate the time you took to post the solution.
Natalie
By Natalie on Mar 25, 2008
STE, It worked. After about 6 hours of trying the Smihfraudfix which didn’t work for me. What an easy fix!
By Lisa on Mar 26, 2008
Opera had no problems! reset IE did the job.
By 皮特 on Mar 27, 2008
Excellent. Worked 200%
By nick on Mar 27, 2008
It worked smithfraudfix was really good. Don’t have the STUPID pop ups anymore!!!!
By Lucy on Mar 28, 2008
None of these worked for me. None of the files above or Keys existed on my compouter.
I paid a Norton AntiVirus expert with remote control of my computer and he tracked down the offending file in windows and registry:
DSAIP32B.DLL
He deleted it (in safe mode) and everything is back to normal
By per619 on Mar 28, 2008
i have tried everything here..manual process, the sftware, and resetting ie settings…but only got partial success
the pop up still comes when i open ie window..it also pops up occassionally when i work offline and open any folder…
earlier it was coming everytime…
its still there…please HELP..
By lome on Apr 3, 2008