Nalazi se u system32 i zove se tcpg4t.dll. Nema sanse da ga skinem. Ne pomaze ni norton ni iz safe moda. Pravi sam sebi neke registre da bi se starotovao i ja mu to obrisem i opet mi ne da da ga brisnem. Zove se jos ili spada u neku grupu Goldun.Iz opisa koji sam video na netu je prilicno opasan a posebno je dosadan kod mene.
Znaci ima li neka rucna metoda da ga skinem ili mora da downloadujem neki softver?

1.Download an emergency copy of SAV32CLI. On an uninfected Windows computer, run this file to extract the contents into a SAV32CLI folder on a medium that can be write-protected. Add any relevant IDEs to this folder and write-protect the disk (on a CD/R or CD/RW close the session).
2.Restart the computer in Safe Mode. Go to Start|Shut Down. Select 'Restart' from the dropdown list and click 'OK'. Windows will restart. Press F8 when you see the following text at the bottom of the screen "For troubleshooting and advanced startup options for Windows 2000, press F8". In the Windows 2000 Advanced Options Menu, select the third option 'Safe Mode with Command Prompt'.
3. At the infected computer, place the CD in the CD drive (D: in this example).
    At the command prompt type

      D:
      to access the CD drive. Type:

      CD SAV32CLI
      Then type:

      SAV32CLI -REMOVE -P=C:\LOGFILE.TXT
      to remove the Trojan.
4. Before leaving Safe Mode, edit any registry entries mentioned in the Trojan analysis recovery instructions.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tcpG4T
DllName
tcpG4T.dll

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tcpG4T
Startup
tcpG4T

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tcpG4T
Impersonate

HKLM\SYSTEM\CurrentControlSet\Services\msudp4\

kasnim sa odgovorom ali, uspelo je ovo ali sam ipak morao da preinstaliram sistem zbog jos brljotina koje se navukle, hvala za savet