[cotter_33]

i don't know how to get rid of it. can any help me. it came from kazaa. norton picked it up and can't do anything to it. it slows down computer to where i can't hardly use it. if anyone knows what i am talking about i would appreciate some help. email: [email protected]

 

[merlin]

cotter_33, welcome to the forums !!!

what you got is something similar to W32.HLLP.Ipamor. I guess just a newer version of it. It basically tries to relate itself to .exe files and tries to shut down some AV programs and firewalls.
Did you update definition & sig. files for norton ? maybe you can try that...if that doesnt work, play with registry. Just be careful because if you mess up registry, you might mess up the whole system ! First restart in safe mode and then run regeditor.

look at this reg. keys :

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

and look for WDM MSWDM.EXE

 

[cotter_33]

i will give it a try

cotter_33, welcome to the forums !!!

what you got is something similar to W32.HLLP.Ipamor. I guess just a newer version of it. It basically tries to relate itself to .exe files and tries to shut down some AV programs and firewalls.
Did you update definition & sig. files for norton ? maybe you can try that...if that doesnt work, play with registry. Just be careful because if you mess up registry, you might mess up the whole system ! First restart in safe mode and then run regeditor.

look at this reg. keys :

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

and look for WDM MSWDM.EXE

hey thanks for replying so quickly i will give that a try.

 

[johnwill]

You might also try an on-line virus scan from these folks: Trend Housecall