Virus Problem...

[ddeder]

I discovered avirus on my computer today. Norton identidied the virus as W32.HLLW.HAI. One file was infected which I immediately quarantined. The infected file is called JFIFH.EXE and was located in my windows directory. I have no idea what this file is. I searched my Windows 98 SE CD for the file and it is not on there. I searched another computers's HD for the file and did not find it (and yes, that computer is running Windows 98 SE, same as the infected computer). Anyone have any idea what this file might be from?

 

[Sleater]

Are you sure thats what the virus is called. I found a couple of things that seem very close:

http://www.symantec.com/avcenter/venc/data/w32.hllw.qaz.a.html

http://www.symantec.com/avcenter/venc/data/w32.hllw.bymer.html

As for the mystery file, I'm quite sure that it was placed on your computer when the virus was executed.

 

[Dantoo]

That virus is a bit new to me. Sure you got it right? W32.HLLW is a type that has been called the Naked Wife email trojan but it does have other forms too.

You may have the "Bymer" worm/trojan. Do a search for files named dnet and see what turns up. Don't panic if it does because it's harmless. Head over to the distributed computing forum and the super-geeks will help you out.

You may have open network shares on your computer (you can be hacked). Go over to the Gibson research site and try a "shields up" test on your machine. Here

You could do a search in "regedit" and see where the .exe file is registered. That should give you a clue as to whether or not to delete it. I sure as hell wouldn't click on it anyway.