Trojan virus in system 32... please help!

[Guest]

Hi all,

Norton identified the following viruses in my
WINNT\sytem32 folder... but stated "unable to delete this
file"...??????... my IE-Tools-Internet Options won't stay
changed... every new session when I open IE, it
continually opens to some stupid site plus a bunch of
other bad operational stuff... I have made several
attempts at downloading patches and so-forth from
Microsoft & Symantec... but it won't allow me to download
them...

1. C:\WINNT\system32\Lsx152.exe - Trojan dropper virus
2. C:\WINNT\system32\Oen80.exe - Trojan dropper virus
3. C:\WINNT\system32\XhfPw5.exe - Trojan dropper virus
4. C:\WINNT\system32\Lqv5ip.exe - Trojan Horse virus
5. C:\WINNT\system32\Ggf86.exe - Trojan Horse virus
6. C:\WINNT\system32\lhpo38P.exe - Trojan Horse virus
7. C:\WINNT\system32\Oen80.exe - Trojan Horse virus

* I have searched all that I know to delete these files...
I can't even find them...

Please help...

Thanks,

Lynn

 

[Mark V]

Hi all,

Norton identified the following viruses in my
WINNT\sytem32 folder... but stated "unable to delete this
file"...??????... my IE-Tools-Internet Options won't stay
changed... every new session when I open IE, it
continually opens to some stupid site plus a bunch of
other bad operational stuff... I have made several
attempts at downloading patches and so-forth from
Microsoft & Symantec... but it won't allow me to download
them...

1. C:\WINNT\system32\Lsx152.exe - Trojan dropper virus
2. C:\WINNT\system32\Oen80.exe - Trojan dropper virus
3. C:\WINNT\system32\XhfPw5.exe - Trojan dropper virus
4. C:\WINNT\system32\Lqv5ip.exe - Trojan Horse virus
5. C:\WINNT\system32\Ggf86.exe - Trojan Horse virus
6. C:\WINNT\system32\lhpo38P.exe - Trojan Horse virus
7. C:\WINNT\system32\Oen80.exe - Trojan Horse virus

* I have searched all that I know to delete these files...
I can't even find them...

Complex. But have you tried booting to Safe Mode?

Bear in mind that while you are connected to the Internet with
this/these Trojans running you may have no control of your machine or
data. Disconnect ASAP until things are cleaned up. Download
fixes/patches on another clean system. All your data and all your
passwords may be compromised.

This is marginally a "commandprompt.admin" topic.

 

[Lynn]

Thank you soooo much... I'll try today

Lynn

-----Original Message-----


Complex. But have you tried booting to Safe Mode?

Bear in mind that while you are connected to the Internet with
this/these Trojans running you may have no control of your machine or
data. Disconnect ASAP until things are cleaned up. Download
fixes/patches on another clean system. All your data and all your
passwords may be compromised.

This is marginally a "commandprompt.admin" topic.


.