Expert: Lorry - 11/29/2006

Question
Dear Lorry,

Hi expert, my pc is infected by troj_shipup.a virus, how can i remove it? any free removal tool to download? my trend micro pc-cillin has detected the following files with virus:

1. A0101276.exe location: c:\system volume information\...

2. ccPrxy.exe location:c:\windows\system32\

I tried to clean it through my trend micro antivirus but it says failed to clean. I tried deleting the files manually but i can't find them in the specified location.

Please help.

Thank you very much.

Regards,
Kenny Lee

Answer
Hi Kenny,

Each AV program has different names for the same virus, saying that, I would suggest using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Hope this helps!
Lorry