Trojan Horse

[Karen]

I've got this thing in my pc. can you tell me how to get
rid of it ..I've run my virus scanner (Grisoft) free
version it had taken it out but now in a different
location..when I run it again it says not found ...so now
what????

[Malke]

Karen wrote:

> I've got this thing in my pc. can you tell me how to get
> rid of it ..I've run my virus scanner (Grisoft) free
> version it had taken it out but now in a different
> location..when I run it again it says not found ...so now
> what????

Since you didn't give us any information about the name of "this thing",
it is impossible to give you more specific advice. Obviously your
computer is not clean. You can try going to an online virus scanner,
like the one from TrendMicro here:

http://housecall.antivirus.com/housecall/start_corp.asp

Otherwise, you probably should bring the computer to a good local shop
and have a professional clean it for you.

Good luck,

Malke
--
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"

[Crusty \(-: Old B@stard :-\)]

How to get things out!

Go to www.Google.com and type in name of thing. Then read about thing. You
didn't feel it was important to tell us the name of the "thing" so it's kind
of difficult to help you.

--
Regards:

Richard Urban

aka Crusty (-: Old B@stard :-)

"Karen" > wrote in message
...
> I've got this thing in my pc. can you tell me how to get
> rid of it ..I've run my virus scanner (Grisoft) free
> version it had taken it out but now in a different
> location..when I run it again it says not found ...so now
> what????

[Karen]

>-----Original Message-----
>How to get things out!
>
>Go to www.Google.com and type in name of thing. Then
read about thing. You
>didn't feel it was important to tell us the name of
the "thing" so it's kind
>of difficult to help you.
>
>--
>Regards:
>
>Richard Urban
>
>aka Crusty (-: Old B@stard :-)
>
>"Karen" > wrote in
message
...
>> I've got this thing in my pc. can you tell me how to
get
>> rid of it ..I've run my virus scanner (Grisoft) free
>> version it had taken it out but now in a different
>> location..when I run it again it says not found ...so
now
>> what????
>
>
>.
>Please forgive me I had forgotten to put the name in
till I hit send.....Virus Trojan
Horse...Downloader.Small.6.T....I do apoliges ...Thanks

[Malke]

Karen wrote:

>Please forgive me I had forgotten to put the name in
> till I hit send.....Virus Trojan
> Horse...Downloader.Small.6.T....I do apoliges ...Thanks

See, now that was helpful. Google infor Downloader.Small.6.T gave the
information that this is connected with wshirda.exe. I found a
reference to this on a messageboard, and here is the quote:

"My AVG Anti-Virus detected a virus this morning:
C:\WINNT\SYSTEM32\WSHIRDA.EXE Trojan horse Downloader.Small.6.T

"Note that there is a legitimate file called wshirda.dll, which is
supposed to be there. There is not supposed to be a wshirda.exe, and
I'm sure the trojan writer is depending on the confusion. The date on
the wshirda.exe file was close to the date on wshirda.dll (2001 as I
recall). It apparently tries to reach an outside server at
search.requestlookup.net according to Sygate Personal Firewall:"

So, you need to make sure that your AVG is using the most current
scanning engine and virus definitions. You need to use msconfig and
disable all suspect programs/processes from starting. Then scan in Safe
Mode and make a note of all malware found. If AVG doesn't delete the
trojan (and it may not have done so before because you were scanning in
Regular Mode and the file was in use), you need to delete the trojan
and related files. You need to have a firewall installed.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

[Malke]

Karen wrote:

>Please forgive me I had forgotten to put the name in
> till I hit send.....Virus Trojan
> Horse...Downloader.Small.6.T....I do apoliges ...Thanks

See, now that was helpful. Google infor Downloader.Small.6.T gave the
information that this is connected with wshirda.exe. I found a
reference to this on a messageboard, and here is the quote:

"My AVG Anti-Virus detected a virus this morning:
C:\WINNT\SYSTEM32\WSHIRDA.EXE Trojan horse Downloader.Small.6.T

"Note that there is a legitimate file called wshirda.dll, which is
supposed to be there. There is not supposed to be a wshirda.exe, and
I'm sure the trojan writer is depending on the confusion. The date on
the wshirda.exe file was close to the date on wshirda.dll (2001 as I
recall). It apparently tries to reach an outside server at
search.requestlookup.net according to Sygate Personal Firewall:"

So, you need to make sure that your AVG is using the most current
scanning engine and virus definitions. You need to use msconfig and
disable all suspect programs/processes from starting. Then scan in Safe
Mode and make a note of all malware found. If AVG doesn't delete the
trojan (and it may not have done so before because you were scanning in
Regular Mode and the file was in use), you need to delete the trojan
and related files. You need to have a firewall installed.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"