keylogger trojan

[Guest]

I have a keylogger trojan virus in my "File: C:\WINDOWS\msin32.dll" file. Every keystroke brings up my Symantec Notification. Ive downloaded all patches to XP and updated my Antivirus. Symantec can only Quarantine it, but its still there and driving me nuts with every keystroke (and God knows what else its actively doing). Can I delete OR REPLACE that particular file and expect to solve the problem??? ANYONE?? Thanks, all.

 

[Ramesh [MVP]]

Ben,

Are you able to delete the DLL when notified by Norton? If not, you will need to terminate the process using Task Manager [which you can access it by right-clicking the taskbar].

Perform a clean-boot using MSCONFIG. Right-click Start button > Explore and navigate to this foldeR:
C:\windows\PCHEALTH\HELPCTR\Binaries

Run MSConfig.exe and in the Services tab, click "Hide all Microsoft services". Disable all.
Goto Startup tab, disable all the entries except your anti-virus application.
Reboot.
See if you are able to delete the malware DLL. Run a Full system scan.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Internet Explorer Newsgroup FAQs:
http://www.mvps.org/sramesh2k/IEFAQ.htm

Computer viruses: description, prevention, and recovery:
http://support.microsoft.com/?kbid=129972

 

[Guest]

Symantec appears to have deleted it when I selected that instead of quarantine, which I was hesitant to do. Is this file critical? Do I otherwise need to replace it?? Thanks again for your help

 

[Ramesh [MVP]]

I believe this file itself is a trojan. No need to replace it.

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Internet Explorer Newsgroup FAQs:
http://www.mvps.org/sramesh2k/IEFAQ.htm

Computer viruses: description, prevention, and recovery:
http://support.microsoft.com/?kbid=129972