Got a TROJAN ?

[rpearson]

Booted my PC yesterday and my trusty Eset NOD32 anti-virus software detected a Trojan virus:

Win32/TrojanProxy.Webber.E

IN FOLDER : C:\Windows\system32\Hnlijlam

My AV cannot clean it, and I tried to delete it manually, but it keeps boppin' around to other areas of the system.Seems I cant shake it.It hasnt caused any problems that I know of, however I know its there and cant get it out thus far.

What is it, and how can this be defeated!?

Your advice and tips are appreciated.

Panduit for President!

 

[jrbarnett]

Which operating system are you running?

John

 

[diogenes10]

some info, including name cross references:

http://www3.ca.com/threatinfo/virusinfo/virus.aspx?ID=35848

Symantec:

http://securityresponse.symantec.com/avcenter/venc/data/trojan.download.berbew.html

 

[rpearson]

Sorry ...running XPHome behind a Router with another PC thats rarely on. Noticed today that my ICF was off.Maybe that could have thwarted this event. I am running a TRIAL version of Eset's NOD32 AV, but it seems very stable and on top of things.I do have a copy of Norton AV 2003 that I can install if needed.

Thanks.

Panduit for President!

 

[jrbarnett]

cablepuller

Firstly, disable system restore (start -> right click my computer -> system restore -> untick "Enable system restore on all drives" then acknowledge all the warnings) otherwise XP will reinstate it after you remove it.
Then, run a full virus scan to clean it up, remove any registry entries relating to the virus etc. After that, reboot, and if OK, re enable system restore.

John