Trojan

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

My firewall detects that my - (C:\WINDOWS\ image.dll) is (Win32.Winshow.g trojan). How do I correct and/or remove
 
Hi,

My firewall detects that my - (C:\WINDOWS\ image.dll) is (Win32.Winshow.g trojan). How do I correct and/or remove

"Click start and then run.
Type regedit
Go to:
HKEY_Local_Machine\Software\Microsoft\Windos\CurrentVersion|Run
On the right you'll find
image REG_SZ rundll32 c:\Windows\image.dll,install
delete image.dll,install

and while still in the registry editor:
Go to:
HKEY_Local_Machine\Software\Microsoft\Windows\CurrentVersion\policies\explorer\run

On the right you'll find:
image REG_SZ rundll32 c:\Windows\image.dll,install
delete image.dll,install

Plus...collapse everything to the left of the registry editor until
only My Computer with the + sign in front of it shows:
At the top, click Edit and then Find.
Where you see Find What, type in:
image.dll Click Find Next.
You'll see a window that says "Searching the Registry".
This will stop on each instance of image.dll when found. Just right
click and delete.

Hit F3 on the keyboard to continue searching the rest of the registry
and delete all of the image.dll references it comes up with.
(delete next instance, hit F3 again, etc...to continue searching and
finding - then deleting)
When finished...you'll see the message, Finished Searching the
Registry. Close it out.

IMPORTANT: Be sure to create a restore point before you go editing in
the registry."

Good luck
 
Back
Top