Trojan.Gema virus - Start Up Error

[jking]

Yesterday, like Shawn, I received Trojan.Gema virus. It affected
Windows\system32\ Pwr32ctrl.exe, and Sndsaver.exe. I have been able to
remove the virus using
http://securityresponse.symantec.com/avcenter/venc/data/trojan.gema.html,
but now I keep getting a missing file error message (Pwr32ctrl.exe).
Currently, I am using the Norton Virus protection software.



The instruction does not cover this particular error message. How do I
remove this problem!

Thank you in advance

Wally

 

[Taurarian]

http://www.mcse.ms/message121196.html
see this message

 

[Doug Knox MS-MVP]

You need to follow the complete removal instructions, including editing the
Registry to remove the entry/entries that are still trying to load the
virus.

 

[jking]

Doug,

I've done the complete removal instruction, but I am still getting the error
message when I restart the computer. I've done the removal process 3 x
times.

I must be missing something!

 

[Elly]

Do a search in your registry for Pwr32ctrl.exe and
Sndsaver.exe. Delete those keys. The complete removal
instructions tell you to look under Local Machine, but
there are probably keys in current user too.