Trojan Win32:StartPage-076

Topic

New Reply

My Avast 4.6, home version, found Trojan Win32:StartPage-076 on my Windows98 system. I can’t move it to the virus chest or delete it with the Avast program. It’s at c:windowstempse.dll. When I run Find Files in Windows Exploring, the file is found, but it won’t let me delete it. Note, I don’t find see file when I look for it in Exploring in C: directory, windows temp folder.

Any suggestions? I don’t know much about all this, but want to learn so I can protect my PC and help it run good. Is this something to worry about. Hope someone can help. THANKS!

Reply | Quote

Replies

Try going to Symantec’s on line security check or one of others that have the on line check.

Semantec is at Security

Other loungers will probably point you to some of the others.

Reply | Quote

Use a DOS boot disk and then “CD” to C:windowstemp. Then try “del se.dll”.

Joe

--Joe

Reply | Quote

If all you want to do is delete this file then get a copy of DrDelete, it’s , and use it to get rid of the file.

Reply | Quote

Do you get the message that the file is in use, as the reason you can’t delete it? Assuming you are running Windows XP or 2000, you could try to kill the program (unload it from memory) using the Task Manager’s Processes tab and End Process. Windows should then let you delete it. If you run Windows 98 or ME, you can use the Process Explorer from SysInternals (search this board for a link).

Reply | Quote

Jefferson,

This thing is in hiding and I wouldn’t think it is going to show up as a running process. I haven’t found anything yet on the best way to remove it except to remove the program that it came in on and then delete the file. But we don’t know what that program is. I have found it’s registry key, but am not sure that is how to go after it. I only mentioned DrDelete as a way to get rid of the file. I should have clarified my post and said that method might not be the best approach. When the OP gets back, I have a few questions before I make any other recommendations.

Edited by Doc 8:17 PM EDT I found some manual removal instructions here. HTH

Reply | Quote