Win32/Mebroot Trojan - Can't shake it.

July 28, 2010 at 07:08:57
Specs: Windows 7
Hi all.

Recently, everytime I, or somebody else logs onto the computer, my Anti-Virus program (NOD32) pops up, saying there's a "Win32/Mebroot" trojan. I click on "Clean" and NOD says that it can't clean this file type (Or something like that). I have no choice but to click on "No Action". From what I read, this could be causing some other problems that I am having....

Every now and then, an audio ad plays in the background. I can have nothing open at all, and suddenly I get an ad playing, with no visible way of stopping it. NOD32 also blocks a site every now and then. Something along the lines of "". I got nothing when trying to read up on it, so I am stumped.

See More: Win32/Mebroot Trojan - Cant shake it.

Report •

July 28, 2010 at 07:33:07
Have you tried this removal tool?

"It's hard to soar like an Eagle when you are flying with Turkeys"

Some HELP in posting on plus free progs and instructions Cheers

Report •

July 28, 2010 at 13:01:05
Jake, please try following the instructions in this thread here:

As well as reading this one:

Mebroot is actually a Bootkit (A program that infects the Master Boot Record, and usually cannot be removed with simple AV software), please post back if those links helped you.

EDIT: Although, with Windows 7, I'm not sure Bootkit Remover will work properly (specially if it's 64bit), in that case, I will look and see what else there is that can be done.

Helpful tips before getting started:</

Report •

August 1, 2010 at 15:08:44
the same exact thing is happening to my computer now. tomsbirdswithhair keeps getting blocked, i have the voice commercials come on every ten mins or so, there is also a clicking noise. i googled what i saw and i found this post...

Report •

Related Solutions

August 11, 2010 at 08:33:14
Security vendors are reporting a new version of Mebroot, aka Torpig and Sinowal, that has been armored with new functionality to avoid detection. The new variant hooks itself deep within Windows to thwart efforts at spotting it.
see this for help on mebroot

TechVTS - Virus removal techniques

Report •

August 23, 2010 at 00:53:00
the same exact thing is happening to me!!!!

Report •

Ask Question