Re: PWS.hooker trogan.. cannot Delete

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 12/22/04


Date: Wed, 22 Dec 2004 06:44:00 -0500

1) If you are using WinME or WinXP, disable System Restore
            http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
2) Reboot your PC into Safe Mode and shutdown as many applications as possible
3) Using your NAV software, perform a Full Scan of your platform and clean/delete any
            infectors found
4) Restart your PC and perform a "final" Full Scan of your platform
5) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
            System Restore preferences, (e.g. HD space to use suggested 200 ~ 400MB),
            reboot your PC.
6) If you are using WinME or WinXP, create a new Restore point
7) Please report back your results

Dave

"Gibraltar" <Gibraltar@discussions.microsoft.com> wrote in message
news:4635FEF9-93E6-47E3-91E5-30B069811C12@microsoft.com...
| hello
| irecently recieved this message after nortons A.V.2003 ran: The file
| C:\WINDOWS\system32\APIHookDll.dll is infected with the PWS.Hooker.Trojan
| virus.
| but nortons says it cannot delete the Trogan.i have dis-engaged system
| restore, am running XP pro.can anyone please help me to remove this problem ?
| any help very much appreciated.
| regards
| --
| Alan



Relevant Pages

  • Re: W2k3 - lsass shutdown problem
    ... Obtain McAfee's virus and worm removal tool, Stinger: http://vil.nai.com/vil/stinger/ ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: Very Strange Problem
    ... Dowload the Trend Pattern File by obtaining the ZIP file. ... If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.windowsxp.general)
  • Re: Download.Trojan
    ... If you are using WinME or WinXP, re-enable System Restore, reboot the PC ...
    (microsoft.public.security.virus)
  • Re: Anybody hear of this?
    ... I have received the JPEG. ... |> 3) If you are using WinME or WinXP, disable System Restore ...
    (microsoft.public.security.virus)
  • Re: trojan horse?
    ... If you are using WinME or WinXP, disable System Restore ... Using the Trend Sysclean and Ad-aware SE utilities, perform a Full Scan of your ...
    (alt.computer.security)