how to remove Porn-dialer.win32.agent.aw

[etabeta123]

Hi,

My o.s. is Windows 98SE.
Altough I have installed on my pc "Active Virus Shield" ( freeware from AOL) my pc was infected with a trojan :
"Porn-dialer. Win 32.Agent.aw " ( the classic dialer from "red lips" )
I don't know I took this trojan because I haven't visited porn sites when I took this trojan.
This is a problem for me because my antivirus is not able to remove it and to recognize it
It returns in unexpected way even when I'm not connected to internet.
Usually when I'm connected to internet I download ( without my willing of course ) in c:\
a file " Klif.spi" and a file .exe like ( it changes every time ) " YTQFAA.exe" in c:\windows\Temp
( the classic dialer from "red lips" )

When I'm not connected to interent I have only " YTQFAA.exe" in c:\windows\Temp.

I delete every time the two files, but they return every time.

In windows-- start programs I deflag every time this start programs like, " YTQFAA.exe"

have you got some advices on how to remove this trojan from windows 98 SE ?
Thank you very much for your support !

Clint

[tetonbob]

Please download HijackThis to your desktop

Alternate link

This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.

---------------------------------------------------------------------------------------------