help!!

Viruses and worms
1

dear all,

i realllly nead your help. there is virus in my computer, it reduce the speed and rebooting automatically sometimes. i install again 2 weeks ago, but i find it again recently. i can not erase it. please help the ignorance girl who is helpless! the virus is wino.sys, it is happened in my c:.…locals~\temp\wino.sys, how can i do?

many great thanks
maggie

2

If a virus is replicant (coming and coming again), you should:

  1. Disable System Restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot.
  4. Use a-squared, ewido or Spyware Terminator (trojan removers).
3

thank you tech, i will try it. thanks a lot!

4

WG had the same problem with wino.sys here

http://forum.avast.com/index.php?topic=22816.msg190042#msg190042

It seems to be a rootkit problem. WG took his problem to the rootkit specialists at CastelCops:

http://www.castlecops.com/t165568-Need_Rootkit_Help.html

csjmaggie, I suggest you try Ewido (the latest updates may kill this rootkit, who knows?) and also these anti-rootkit programs:

F-Secure BlackLight:

http://www.f-secure.com/blacklight

AVG Anti-Rootkit (Beta)

http://www.freewarefiles.com/downloads_counter.php?programid=22524

Sophos Anti-Rootkit:

http://www.sophos.com/products/free-tools/sophos-anti-rootkit.html

If you are unsure about the results of the programs, post them here for advice before proceeding, or open a thread at CastleCops where you will be advised on these and other programs you can run in order to remove rootkits.