TROJAN HORSE VIRUS INFECTED .EXE FILE

[Guest]

A TROJAN HORSE VIRUS HAS INFECTED MY C:\WINDOWS\SYSTEM32\NSSYS32.EXE FILE PER A SCAN WITH NORTON ANTIVIRUS. NORTON SAYS IT CANNOT FIX, REMOVE, OR QUARANTINE THE VIRUS.

CAN I SIMPLY DELETE THE FILE, OR WHAT SHOULD I DO.

A MSN TECH LOGGED ON WITH ME TODAY AND SAID HIS CHECK OF MY SYSTEM DID NOT DETECT IT, AND SUGGESTED I CONTACT NORTON.

HELP!!!!!

 

[Doug Knox MS-MVP]

The name of the virus/trojan would be helpful. Other than that, boot your system into Safe Mode and re-scan your system.

 

[Kent W. England [MVP]]

A TROJAN HORSE VIRUS HAS INFECTED MY C:\WINDOWS\SYSTEM32\NSSYS32.EXE
FILE PER A SCAN WITH NORTON ANTIVIRUS. NORTON SAYS IT CANNOT FIX,
REMOVE, OR QUARANTINE THE VIRUS.

CAN I SIMPLY DELETE THE FILE, OR WHAT SHOULD I DO.

A MSN TECH LOGGED ON WITH ME TODAY AND SAID HIS CHECK OF MY SYSTEM
DID NOT DETECT IT, AND SUGGESTED I CONTACT NORTON.

HELP!!!!!

If you are struggling to delete a trojan manually, these are the steps
you must follow.

1) Identify the file (you already did this)
2) Kill that process
3) Delete or rename the file
4) Remove the run key or file entry that starts that process

This sounds simple, and is for a few trojans, but not trojans that

1) disable Task Manager, regedit, and msconfig
2) that hide processes from Task Manager
3) that change their file name each time they are run
4) that hide the startup entry in some obscure place

For these trojans you need tools. The tools work on a per-trojan basis.
Trojans have names ...

WHAT IS THE NAME OF THE TROJAN?????