Trojan in msurl\32.exe

  • Thread starter Thread starter Derek F
  • Start date Start date
D

Derek F

Norton advised me of a Trojan in C:\windows\system32\msurl\32.exe. I did a
virus check in safe mode and it found three instances of it which it could
not clean so I took the option to quarantine them. Now when I reboot I get a
message saying that the (now quarantined) file cannot be found and to make
sure that it exists or to remove it from the registry. Is this a file that I
need to re-install from somewhere or can I safely delete the registry
reference, if I can find it.
Derek.
 
In Message-ID:<[email protected]> posted on
Norton advised me of a Trojan in C:\windows\system32\msurl\32.exe. I did a
virus check in safe mode and it found three instances of it which it could
not clean so I took the option to quarantine them. Now when I reboot I get a
message saying that the (now quarantined) file cannot be found and to make
sure that it exists or to remove it from the registry. Is this a file that I
need to re-install from somewhere or can I safely delete the registry
reference, if I can find it.
Derek.
Click to expand...

Run hijackthis and note the entries under category 04,
you should be able to delete the key with the "fix checked" option.
http://www.spychecker.com/program/hijackthis.html
Direct download:
http://files.webattack.com/localdl834/hijackthis.zip
 
Back
Top