Winpup32

[Andy]

Hello, just wondering if anyone out there is familliar with winpup32.exe. I
have this trojan on my pc and am having a hard time getting rid of it.
Norton, Mcafee, Panda, adaware, and spybot have not done a thing for me. I
also did a virus scan in safe mode with no luck. Any help would be
appreciated.

733, p3, xp pro

Thanks

 

[Wrangler]

Hello, just wondering if anyone out there is familliar with winpup32.exe.
I have this trojan on my pc and am having a hard time getting rid of it.
Norton, Mcafee, Panda, adaware, and spybot have not done a thing for me.

It sounds like this is the chappie... AdClicker-O.

http://vil.nai.com/vil/content/v_100446.htm

There are also manual instructions in the document on how to get rid of
it... But make sure you backup your registry before making any changes if
you choose to go that route.

Have you checked your engine DAT version on McAfee...? It needs 4273 or
later.

If you have the file in question in your system directory (winpup32.exe)
upload it at http://www.webimmune.net to get a check on the file done to
confirm.

\/\/

 

[Karel]

Hello, just wondering if anyone out there is familliar with winpup32.exe. I
have this trojan on my pc and am having a hard time getting rid of it.
Norton, Mcafee, Panda, adaware, and spybot have not done a thing for me
I also did a virus scan in safe mode with no luck. Any help would be
appreciated.

Are you sure all off the above products are with recent updates. Surely you
have to download the windows updates and OE patches when I see the version
that you are working with now.

Sucz

 

[Andy]

Thanks for the replies. It seems as though I may not have Mcafee up to date
so I'm working on that route at the moment. I'll report back with my
results. It's an annoying little Trojan more than anything, still not a nice
feeling having it on my pc.

Thanks

 

[Andy]

OK, I am completely stumped on getting rid of this trojan. I have updated
Mcafee, Norton, tried Panda, Spybot, Adaware, and done a lot of reading at
different forums and such. I have tried going into the registry and finding
it, didn't work. I have tried deleting it from Dos, with no luck also. What
I am wondering is, if I reformat will it get rid of it? Any other
suggestions would be great.
Thanks

 

[null]

OK, I am completely stumped on getting rid of this trojan. I have updated
Mcafee, Norton, tried Panda, Spybot, Adaware, and done a lot of reading at
different forums and such. I have tried going into the registry and finding
it, didn't work. I have tried deleting it from Dos, with no luck also. What
I am wondering is, if I reformat will it get rid of it? Any other
suggestions would be great.
Thanks

Did you delete winpup.exe from your \system folder? Did you not find
the reference in your registry Run key (see description below) and
remove it?

http://securityresponse.symantec.com/avcenter/venc/data/trojan.adclicker.html


Art
http://www.epix.net/~artnpeg

 

[null]

I am not seeing the key in the registry, also nothing in the system folder
either.

Do you have a file named hosts on your h.d.? If it exists on Win 9x/ME
it is in your Windows folder, for example. The file name has no
extension. If you have a hosts file, try renaming it to hosts.old and
see what happens.



Art
http://www.epix.net/~artnpeg

 

[Andy]

Thank God it's gone, that's all I can say. What I ended up doing was
downloading a small program called HighJack This, it scans your registry and
makes a logfile of all the stuff that shouldn't be there, I then had someone
with a lot more pc skills than I have to look at it, and went back and
removed the bad stuff. I appreciate all the help I received here. Thanks