Please guys help me get rid of trojan.linst. Norton detected it earlier and i quarantined it and deleted it from the list but its still there and i am unable to use IExplorer. i keep getting a warning everytime i turn my PC on regarding cihost.exe, this was the file that was infected. i have Trojan Remover but it doesnt have Linst in its database, its a trial version but isit is uptodate. Now it seems that norton is infected as well coz when i start my comp in safe mode and open Norton it tell me that auto protect is not enabled and email scannin status is an error. Are there any removal tools for this virus ? Please someone help me out here!! Thanks Guys

Follow the Removal Instructions for your version of Windows at the link below. Trojan.Linst Removal Instructions Tufenuf

Joeschmo: It's hiding in your system restore files. Read this and do it: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001012513122239?OpenDocument&src=sec_doc_nam But leave it disabled until you are SURE all of it is gone. Download and run SwatIt: http://swatit.org/download.html How is your Firewall, how did this bug get throught it? Try Sygate or Kerio firewalls, free and great. I run Sygate, very happy with it. Do you run SpyBot and Adaware? If not, here's what I do (UPDATE THEM EVERY 3 DAYS): Spybot: Download and Read the SpyBot tutorial here: http://s89223352.onlinehome.us/mirror/spybot/index1.php Download it, Unzip the program, and immediately check for updates, install the updates and then do the scan. Let it fix everything marked in red. Reboot but not with restart, shut it down for two full minutes. You’ve got two measely minutes and it’s worth it, and let Spybot run if it indicates. To add an item to your ‘Ignore List” click on the little ‘+’ sign next to the item and left click it to highlight it, then right click it and a menu appears, select the function you want. When you are done reboot again same way. Two full minutes shut sown is best. Ad-Aware: Download AdAware from http://www.lavasoft.de/ check for updates at "webupdate". I use these settings (green check) From main window click "Start" then make sure " Activate in-depth scan" has a green check next to it. Put a black dot nest to "Use custom scanning options” and click Customize" next to it, then green check these options: "Scan within archives" ,"Scan active processes", "Scan registry", "Deep scan registry" ,"Scan my IE Favorites for banned URL" "Scan my host-files" At the top of the “STATUS” page notice the Tweak (gear) icon. Click on it. The first setting is “Scanning Engine.” Click on the little plus sign next to it, and in the drop-down green check "Unload recognized processes during scanning", and “include basic Ad-Aware settings in log file”. Next click on the ‘+’ next to "Cleaning Engine" and in the drop-down green check "Let windows remove files in use at next reboot" and Delete quarantine objects after restoring” Click "proceed", that will save those settings. Click "Scan" When the scan finishes, mark everything for removal and delete it. Right-click the window and choose "select all" from the drop down menu, press ‘next’ and then ‘yes’ to the prompt: “remove all these entries”. However, if you have certain programs running that will give a false indicator of a browser hijack attempt, such as Script Sentry, which places a monitoring function in the registry and looks like a browser hijacker but is not, then you may want to add that to the ignore list because you want to keep it there to do it’s job. To add an item to the ignore list, put the a cursor on the file it reveals and left click it to highlight it, then right click it and a menu appears. Click on ‘ignore list.’ Shut down, two minute shut down is best, and let Adaware run on reboot if it indicates. __________________ Also, remember, when you download from the net (unless it's MS which doesn't give you the chance) after the download BEFORE you install it-- #1. log off the net, #2. diable your AV (right click tray icon) and close the AV program with ctrl alt delete = close programs. THEN do the installation. If not, your AV could possible perceive some of the download as as an invader and mess with it, some of that frag could injure your IE. Thresher Thresher

thanks tufeneuf and thresher for ur responses i had gone to that symantec site and followed the instructions there but when i am doin the scan in safe mode it doesnt detect anythin. also the Auto protect feature in Norton is disabled in safe mode and when i try to enable it it comes up with a script error. My Antivirus is infected too i think! i dont know what to do? Threser i have spybot but unless i get rid of this Linst i dont think spybot will help. Is there some sort of removal software which gets rid of Linst by itself without me goin into safe mode and stuff. What about Regrun will that get rid of Linst? Please advise me what to do?

Guys any suggestions, i am desperate for a solution havent used the net for a month now. Are there any anti-trojan software besides Trojan Remover that can detect and eliminate Trojan.LINST?? Does anyone know what Regrun does, will is it capable of eliminating Linst?? someone please come to the rescue!! all responses greatly appreciated Thanks

JoeSchmo, Try following the instructions at the link below which are easy to follow. Also read the instructions under "Technical Details". Your Norton AV isn't infected. When you start the computer in SAFE mode the AutoProtect and e-mail scanner aren't loaded thus you get those errors. You must end the process on "CIHOST.EXE" as shown under "Terminating the Malware Program" and you must go into the registry and it's not difficult if you follow the instructions which show you which entries must be deleted in the right pane. TROJ_LINST.A Removal Instructions Tufenuf

Tufenuf thanks, i did what that site says but i cant find the log.txt file, there is a log.txt file in Program files should i delete that and i also cant find master.hosts. but when i do a search in C:\Windows i find the following files in C:\Windows and C:\Windows\System Zlib.dll Dlinsth.dll Dlinst0.dll Bho.dll Httpreq.dll These files were mentioned on the symantec website they were hidden can i just delete them will that solve it. I used the online scanner that was on the trend micro site u gave me and it didnt detect these files. i know the virus is still there. Can u pls help me out. Your help is very much appreciated. Thanks