Trojan in msurl\32.exe

[Derek F]

Norton advised me of a Trojan in C:\windows\system32\msurl\32.exe. I did a
virus check in safe mode and it found three instances of it which it could
not clean so I took the option to quarantine them. Now when I reboot I get a
message saying that the (now quarantined) file cannot be found and to make
sure that it exists or to remove it from the registry. Is this a file that I
need to re-install from somewhere or can I safely delete the registry
reference, if I can find it.
Derek.

 

[Bart Bailey]

In Message-ID:<[email protected]> posted on

Norton advised me of a Trojan in C:\windows\system32\msurl\32.exe. I did a
virus check in safe mode and it found three instances of it which it could
not clean so I took the option to quarantine them. Now when I reboot I get a
message saying that the (now quarantined) file cannot be found and to make
sure that it exists or to remove it from the registry. Is this a file that I
need to re-install from somewhere or can I safely delete the registry
reference, if I can find it.
Derek.

Run hijackthis and note the entries under category 04,
you should be able to delete the key with the "fix checked" option.
http://www.spychecker.com/program/hijackthis.html
Direct download:
http://files.webattack.com/localdl834/hijackthis.zip

 

[Derek F]

In Message-ID:<[email protected]> posted on


Run hijackthis and note the entries under category 04,
you should be able to delete the key with the "fix checked" option.
http://www.spychecker.com/program/hijackthis.html
Direct download:
http://files.webattack.com/localdl834/hijackthis.zip

Thank you. There was also an entry in F1 which referred to an entry in
boot.ini. I could not see it in boot.ini but I did delete F1.
Derek.