Virus Woes: Trojan.nebular

[karmanya]

guys i have a big problem i use windows xp sp 2 and have a norton antivirus 2005 on scannin i get a file winwly32.dll which is infected with a trojan nebular it doesnt delete it and says access denied what do i do? the exact object name is "C:\WINDOWS\system32\winwly32.dll" (without the double inverted commas) please help me

 

[anandk]

winwly32.dll is a dangerous spyware. scan with ur norton in SAFE MODE and c if it helps.

else download, indtall, update AVG AntiSpyware, and run its scan in SAFE MODE. it shud help u.

else use Unlocker or delete doctor to delete the sticky malware.

 

[Kiran.dks]

Trojan.Nebuler is a Trojan horse that attempts to download and execute files from remote sites. It also sends information about the compromised computer to a remote site.

Solution:

1. Disable System Restore
2. Download 'Windows Defender' (Genuine XP users) or SpyBot (freeware)
3. Scan entire system
4. Go to registry editor and delete these subkeys if existing:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSMGR
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32

Restart after this process and enable System Restore.

 

[GeekyBoy]

You can also try booting in Safe Mode and deleting the infected file.

 

[karmanya]

thanks guys! ill check it out today after school

 

[Pragadheesh]

y dont u disable ur antivirus for a min and delete d infected file , then enable ur AV...