Trojan - please help

[anikya]

My computer was running slow and I ran some online virus scans. All returned
0 infected except RAV.

RAV anti-virus detected a trojan Win32/haher in
Windows\system32\wextract.exe and
Windows\system32\dllcache\wextract.exe

I had checked their autoclean button, but apparently this particular trojan
cannot be cleaned and has to deleted.

I am not sure about deleting this file.
From its properties, it seems to have been one of the files downloaded via
windows update.
Name WEXTRACT
Version 6.00.2800.1106 (xpsp1.02828-1920)

Please advise on how to remove this trojan.

anikya

 

[Guest]

What version of Windows are you running?

Maybe RAV is not updated?

 

[anikya]

Running XP pro version 5.1 (build 2600.xpsp2.030433-1600 : Service Pack 1)
Never occurred to me RAV may not be updated, since it was online scan.
This trojan is supposed to produce flashes.
I do remember that the browser did flash like crazy yesterday, and I closed
it in a hurry. But I had scanned with spybot immediately after and system
came out clean.
The resident AVG didn't report anything either, but their online scan also
saw nothing wrong.

 

[Guest]

Go to symantec.com and search for a removal tool by
searching for the trojan name and see if they have a
removal tool.

 

[anikya]

Been there, can't remember exactly, but no help.