HELP - Virus

[Steve K]

Got another virus. My Norton found an infected file and
quarantined it. (OF COURSE it could'nt be repaired)I
haven't downloaded anything lately, but...nevertheless I
got a "backdoor trojan" infecting a file in
C:\windows\System32 called: ClrSchP012.dll

Since it couldn't be repaired, I deleted it - no
noticible effect on my system, yet.

Any idea on what this file is and what it does and how I
might get another one without having to reinstall my
entire Windows (XP)?

Please help - Thank you.

 

[Carey Frisch [MVP]]

There is a very helpful virus removal newsgroup you may wish to post to:
news://msnews.microsoft.com/microsoft.public.security.virus

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

---------------------------------------------------------------------


| Got another virus. My Norton found an infected file and
| quarantined it. (OF COURSE it could'nt be repaired)I
| haven't downloaded anything lately, but...nevertheless I
| got a "backdoor trojan" infecting a file in
| C:\windows\System32 called: ClrSchP012.dll
|
| Since it couldn't be repaired, I deleted it - no
| noticible effect on my system, yet.
|
| Any idea on what this file is and what it does and how I
| might get another one without having to reinstall my
| entire Windows (XP)?
|
| Please help - Thank you.

 

[Bob Dietz]

Got another virus. My Norton found an infected file and
quarantined it. (OF COURSE it could'nt be repaired)I
haven't downloaded anything lately, but...nevertheless I
got a "backdoor trojan" infecting a file in
C:\windows\System32 called: ClrSchP012.dll

Since it couldn't be repaired, I deleted it - no
noticible effect on my system, yet.

Any idea on what this file is and what it does and how I
might get another one without having to reinstall my
entire Windows (XP)?

Please help - Thank you.

Searching http://www.google.com for
ClrSchP012.dll
indicates it's probably ad-ware/spy-ware.

Download:
LavaSoft's Ad-Aware http://www.lavasoftusa.com/
and
PepiMK's Spybot SD http://www.safer-networking.org/

Your very first step when running either program, should be
to up-date them with the latest definitions.

If either reports finding something but can't remove it,
boot into safe mode and run from there.

Bob

 

[bullwinkel J. Moose]

I'm courious. How do you know it's a trojan. What did it do? Do you stay
connected all the time? Have you no firewall? Don't you use a good anti
trojan/adware blocker as mentioned by the MVP's?

This is not a critism as my friends who are users mainly of email get
viruses and other imports all the time and don't have the above. I wish you
luck in cleaning up an easier way. There are lots of help sites including on
line tests plus Adaware and Spybot search and destroy which are both free
and should be used regularly. Also AVG (grisoft) which is a good anti-virus
which is also free.