Trojan in the C:\Windows\web\win.def file

[rdoor]

NOrton Antivirus keeps notifying me that I have developed a Trojan is present in the c:\windows\web\win.def file. The window won't go away. It is identified merely as "Trojan Horse", no additional data offered. We can run all the programs on the computer OK except Internet which is so slow that it essentially won't run; the messages are usually that the page is not available.

The start pages on the internet explorer change randomly.

I can't find anything to help me with this. I've tried to rename and copy and move but it won't with the message "Access Denied".

Roy from Iowa

 

[tb525]

You have a CoolWebSearch hijack. Download and run CWShredder to remove it.

http://216.180.252.218/~spywareinfo.com/downloads/tools/cwshredder.zip

 

[steamwiz]

After running the Shredder

Please Download hijackthis from

http://tomcoyote.org/hjt

Unzip, doubleclick HijackThis.exe, and hit "Scan".

After the scan has finished the "scan" button will turn into a "save log" button

save the log file and paste it here

Do not delete anything yet, as most things hijackthis finds are harmless and needed.

steam