Trojan: Winshow.V

[Michael]

Anybody know how to get rid of Winshow.V? I've had
this trojan for quite a while and it's annoying the poop
out of me, so any help would be much appreciated.

I use:
Windows XP
IE 6.0
AVG Anti-Virus (updated regularly)
Javacool Spyware Guard
CW Shredder
HijackThis
LavaSoft Ad-Aware

~michael~

 

[larry]

how about spybot from safer-networking.org update and scan
on easy.

and winshow is a cool web search varient try
http://www.pchell.com/support/lookfor.shtml
look a third of the way down for removal instructions

 

[Michael]

I've tried running AV software and anti-spyware/adware
software (including spybot) and it "allegedly" fixes the
problem. Then about two minutes later, the virus is back.

~michael~

 

[H Leboeuf]

I know about Winshow but Winshow.V may be a new variant.
If these do not help you in removing completely.

Winshow http://www.doxdesk.com/parasite/Winshow.html
More: http://www.pestpatrol.com/PestInfo/w/winshow.asp
More: http://www.spywareinfo.com/~merijn/cwschronicles.html#winshow
--


Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
** NOTE NEW ADDRESS **
Pages at generation.net will no longer be updated.
===

 

[Michael]

Attempting to send HijackThis info, having to do it
from another computer - mine won't let me access the web
page ("Page cannot be displayed" common IE error
message). Other than that, nothing has worked.