trojan here to stay

[mayfieldmare]

Please can anyone help me remove this trojan from my pc
 its called backdoor.ruledor and no matter how many times I think i've got rid of it,. it re-appears the next day!!
I,ve found it in c/program files/clearsearch/csie.DLL.
Any ideas  

[RejZoR]

You may try using Ad-aware 6 and SpyBOT 1.3.
You can find both on my page.

[mayfieldmare]

THANKS  i think i may have cracked this. went to your site and downloaded both od them and FINGERS CROSSED things seem okay so far.

[RejZoR]

Hehe i knew it ClearSearch is classified as spyware (homepage hijack if we are precise)

[mayfieldmare]

 
Sorry, spoke too soon.  I tried disabling system restore, starting up in safe mode, running Adaware and Spybot s+d, AVG, AND Norton AV.Whicj found and deleted this. Re-booted etc and everything seemed fine. But this morning its back. Any more suggestions

[whocares]

Hi,

is it found in the same location, i.e.:
c/program files/clearsearch/csie.DLL  ?

you probably get reinfected via security holes in Windows& InternetExplorer(IE) and/or some Share/freeware program bundled with the above AdWare (Clearsearch)

read here:
VGREP


Please
- post a logfile of hijackthis: http://hjt.klaffke.de/en (extract the EXE into a new empty folder before running it..)

- Delete the entire folder c:\program files\clearsearch

- make SURE you have all Windowsupdates applied!!

- secure your IE better:
Disable activeX & scripting except for known, SECURE sites
- Blocking of lots of malware targeting the security holes in IE can be done with Spywareblaster from javacool

use board-seach and google
 

[RejZoR]

Oh i recommend that you use Opera or Mozilla based browser. Much faster with more configurable interface and better security against such nastys.