Help with Trojan Horse problem...

[cohenfive]

my daughter's pc seems to have a trojan horse that i haven't been able to get rid of. when someone goes on the net or when the pc is booting, antivir gives the following message a couple of times:

C:\WINNT\System32\AWTSP.DLL

is trojan horse TR\DLDR.AGR.DLL

when i try to quarantine or remove it i am unable. i've found awtsp.dll in the system 32 folder but am worried about getting rid of it. has anyone here seen this and what should i do? in the meantime internet access is spotty--for example yahoo music will not load--has to be related somehow.

thanks!

 

[mechBgon]

Try this next:

1) run F-Secure's BlackLight beta from http://www.f-secure.com/blacklight and see if it finds suspicious stuff

2) try uploading a copy of that offending file to http://www.virustotal.com and post what the analysis says, if possible

3) run the manual scan I wrote up in this text document. Follow the directions precisely, including using Safe Mode With Command Prompt.

 

[John]

In addition to Mech's excellent advice try the following online virus scanners.

[*]Panda Activescan
[*]BitDefender

 

[Cdubneeddeal]

Reason you can't put in in quarantine or delete it is it's been loaded in memory. But i'm sure Mech's document states that.

 

[cohenfive]

thanks gang, i'll take a look at this today and report back!