Backdoor Winshell Virus (HELP!)

[ThinkNotes]

Hi:

I'm running win2000 professional and I encountered a virus when I did
the
scan this morning. Symantec was not able to delete, fix, or
quarentine the corrupted file. The virus name is backdoor.winshell,
the location is c:\winnt\system32.

I tried the manual remove by searching for the registry key run and
runservices, but the run services key was not there and in the Run
key, the value winshell or rhshell it asked to delete were not there.

Does enybody know how to remove this virus manually?

I use the Norton Anti Virus Corporate Edition and it is fully updated.
Thanks for your help, I am not a technical person and seem to be at my
wits' end.

Thanks
Manju Bansal
San Jose, CA

 

[David W. Hodgins]

scan this morning. Symantec was not able to delete, fix, or
quarentine the corrupted file. The virus name is backdoor.winshell,
the location is c:\winnt\system32.

See http://securityresponse.symantec.com/avcenter/venc/data/backdoor.winshell.50.removal.tool.html

Regards, Dave Hodgins

 

[Geese_Hunter]

backdoor.winshell

Try this link found on google.com

http://
securityresponse.symantec.com/avcenter/venc/data/backdoor.winshell.50.re
moval.tool.html