trojan-win32.winshow and win32.small

:oPlease help me i can’t access my computer it freezes all the time i know the antivirus found these 2 worm win32.winshow.u and win32.small it also found earlier java/byteverify and some others that i can’t remember can someone help me with this
Thanks Marc

Hi,

what WIN do you have ?
Where exactly was the infected File found (full pathname and filename) ?

test the file with OnlineScanners e.g. from Trend & KAV (see below) to get a more specific name
(you need to temporarily disable AV-Resident Shields/Monitors to be able to scan the file online)

-remove the Virus/Malware and it’s system modifications according to VirusInfos
from Avast, VGREP, TrendMicro, Kaspersky;
you might also try searching for the virus name or filename with google

general removal procedure:

  • disable system restore on Win ME/XP
  • best reboot in SafeMode (F8-Boot)
  • kill respective Backdoor/Trojan process with task manager (if it still exists in safe Mode)
  • search for the file/process names in the registry; remove the malware’s startup entries in the registry
  • disinfect or (if disinfection is not possible) delete the file; this may be possible only after a reboot

-Secure your system (change passwords, secure shares, install patches/updates for WIN, IE etc…)
-scan your whole system with updated avast and maybe a 2nd scanner ,e.g. TrendMicro to check whether your PC is clean :wink:

  • reenable system restore on Win ME/XP

if it’s of the trojan-gen kind: spybot, ad-aware and cwshredder might also help
if you still can’t remove it, you could post a logfile of Hijackthis here

see www.lurkhere.com ->nicefiles and www.lavasoft.de

Further Details and Links via the board search above

hy, i’m using windows 98 se, the files were mostly in
c:\windows\temp i’ve been having problem for the last week some of the virus i’ve had so far were downloader.small.a.d, java/byteverify, java.stsrtpage.c
win32.winshow.u, win32.small i’ve also had these files detected as virus tksrv98.exe, a.exe, unp128180541,unp232898789,unp128180541,unp128230156,unp128100593,unp233042721,unp264043111, i’ve also had bridge.exe and so many more that i don’t remember mostly the problem now is that my computer freeze and i have to reboot that can happen several time in an hour and when i go on the internet it wont go where i want it to go the system opens many many many pages of xxx and then the system freeze i’ve try to use the antivirus but usually after a while the system freeze and the antivirus stop so i’ve done a system check(antivirus) in dos that way i was able to remove most of the virus i’ve try to get on the internet with IE but the system shut my IE within seconds so i can go on it, i’ve try with my netscape 7.0 system lets me through but it doesn’t let me download it shut the program down but now i think these virus made some changes in my Hkeys i have try to test my computer with trend but it does not seem to work with netscape and kav seems to work only one file at a time, i don’t know what to do anymore, i’m using my work computer to write with you because my computer is really freaking me out…

help me please…

hy , one more info i’ve been trying to download hijack this
with netscape but when the program is almost loaded the system freeze and there is nothing i can do but shut down the computer…
thanks
Marc

Hi,
download spybot, ad-aware and cwshredder on your work pc, and install them on the infected one in SafeMode; scan&fix several times with each of them

  • also with avast, and apply all windowsupdates, OFFLINE if necessary :wink:

i can’t download on my work computer it is protected only the administrator can and i’m not,But anyway i don’t know how to connect both computer together

ok i’ve downloaded all 3 programs on my work computer but now how do i plug it with my home computer, my work computer is a laptop with windows 2000
thanks
Marc

well liek you always transafewr data from work 2 home:
burn a CD, or split it on diskettes (e.g. with www.winzip.com ) or transfer it via local network or email

i know how to send email from a computer to an another
but the problem is that my infected computer will not open the internet anymore and i do know how to copy on a diskette but the program is too big and i do not know how to use winzip to copy the program and to make it fit on a 3.5 diskette.
marc

and also mu work computer has no program to burn cd
marc

Hi marc,

a) Install Winzip; Winzip has a program help
b) insert a disk into A: drive on your laptop, then rightclick on the file(s) you want to transfer;
select Winzip–>Add to Zip-archive;
select A: as location for the archive, then the spanning over multiple disks will be done by winzip; keep several disks ready
:wink: