Is My XP Virus Corrupted?

[Scott in L.A.]

My AVG anti-virus told me that I have the "Trojan Horse
Downloader.Agent.AQN" virus in serveral places in my computer. I appear to
have removed it since a virus scan comes up clean. But I have two concerns
about after effects.

1. The AVG now says the file "Windows\System32\Shell.dll" is "changed"
instead of "ok" like the rest of the system files. Do I have a problem? If
so, how do I detect and fix it?

2. I now have a hidden folder "Documents": C:\Documents and Settings\All
Users\Documents. This "Documents" folder contains folders that have my
personal data which leads me to suspect that it was renamed from "My
Documents". It does not appear in the All Users folder window. How can I
make it visible again?

The day after I deleted the virus, when I turned on my computer (Dell
desktop XP Home updated in October), the Microsoft Security center stated
that the anti-virus was turned off. AVG itself said it was running and a
virus scan came up clean.

AVG detected the virus when I opened up a folder that contained two .exe
files that had the virus. The programs that had the virus were the recent
update (v1.06?) of Ad-Aware Anti-Spy installer software (downloaded mid
Oct?) and the Desktop Weather installer from the Weather Channel (Nov 2). A
virus scan discovered the virus in a folder called "RECYCLER" and in two
folders named MP3* in Windows\Temp.

AVG states this virus functions as a password stealer, and/or allows remote
access. In the last week or two, I have been getting Zone Alarm firewall
alerts stating access was successfully blocked.

Any help or comments will be appreciated.

Scott
West LA

 

[MAP]

My AVG anti-virus told me that I have the "Trojan Horse
Downloader.Agent.AQN" virus in serveral places in my computer. I
appear to have removed it since a virus scan comes up clean. But I
have two concerns about after effects.

1. The AVG now says the file "Windows\System32\Shell.dll" is "changed"
instead of "ok" like the rest of the system files. Do I have a
problem? If so, how do I detect and fix it?

2. I now have a hidden folder "Documents": C:\Documents and
Settings\All Users\Documents. This "Documents" folder contains
folders that have my personal data which leads me to suspect that it
was renamed from "My Documents". It does not appear in the All Users
folder window. How can I make it visible again?

The day after I deleted the virus, when I turned on my computer (Dell
desktop XP Home updated in October), the Microsoft Security center
stated that the anti-virus was turned off. AVG itself said it was
running and a virus scan came up clean.

AVG detected the virus when I opened up a folder that contained two
.exe files that had the virus. The programs that had the virus were
the recent update (v1.06?) of Ad-Aware Anti-Spy installer software
(downloaded mid Oct?) and the Desktop Weather installer from the
Weather Channel (Nov 2). A virus scan discovered the virus in a
folder called "RECYCLER" and in two folders named MP3* in
Windows\Temp.

AVG states this virus functions as a password stealer, and/or allows
remote access. In the last week or two, I have been getting Zone
Alarm firewall alerts stating access was successfully blocked.

Any help or comments will be appreciated.

Scott
West LA

I know that many in this newsgroup reccommend AVG but I have read too many
posts like yours to think that AVG is nothing but crap,a good virus program
would have detected the trojan BEFORE it got on your system.

Try this trojan scanner for free (two weeks free I believe).
http://www.ewido.net/en/

RECYCLER is your recycle bin, "empty it."