Virus Woes: Trojan.nebular

Discussion in 'Software Q&A' started by karmanya, Nov 19, 2006.

Thread Status:
Not open for further replies.
  1. karmanya

    karmanya New Member

    Joined:
    Sep 6, 2005
    Messages:
    227
    Likes Received:
    0
    Trophy Points:
    0
    guys i have a big problem i use windows xp sp 2 and have a norton antivirus 2005 on scannin i get a file winwly32.dll which is infected with a trojan nebular it doesnt delete it and says access denied what do i do? the exact object name is "C:\WINDOWS\system32\winwly32.dll" (without the double inverted commas) please help me
     
  2. anandk

    anandk Distinguished Member

    Joined:
    Mar 8, 2005
    Messages:
    3,786
    Likes Received:
    106
    Trophy Points:
    0
    Location:
    Pune
    winwly32.dll is a dangerous spyware. scan with ur norton in SAFE MODE and c if it helps.

    else download, indtall, update AVG AntiSpyware, and run its scan in SAFE MODE. it shud help u.

    else use Unlocker or delete doctor to delete the sticky ;) malware.
     
  3. Kiran.dks

    Kiran.dks New Member

    Joined:
    Apr 3, 2006
    Messages:
    2,494
    Likes Received:
    91
    Trophy Points:
    0
    Location:
    Pune, India
    Trojan.Nebuler is a Trojan horse that attempts to download and execute files from remote sites. It also sends information about the compromised computer to a remote site.

    Solution:

    1. Disable System Restore
    2. Download 'Windows Defender' (Genuine XP users) or SpyBot (freeware)
    3. Scan entire system
    4. Go to registry editor and delete these subkeys if existing:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSMGR
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winowl32

    Restart after this process and enable System Restore.
     
  4. GeekyBoy

    GeekyBoy New Member

    Joined:
    Feb 28, 2006
    Messages:
    497
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Kolkata
    You can also try booting in Safe Mode and deleting the infected file.
     
  5. OP
    OP
    karmanya

    karmanya New Member

    Joined:
    Sep 6, 2005
    Messages:
    227
    Likes Received:
    0
    Trophy Points:
    0
    thanks guys! ill check it out today after school
     
  6. Pragadheesh

    Pragadheesh New Member

    Joined:
    Jul 10, 2006
    Messages:
    403
    Likes Received:
    0
    Trophy Points:
    0
    Location:
    Coimbatore
    y dont u disable ur antivirus for a min and delete d infected file , then enable ur AV...:cool:
     
Thread Status:
Not open for further replies.

Share This Page