Expert: Lorry - 6/7/2006

Question
Hello Lorry,
I'm pretty afraid of messing with the registry and without a tool, that's what I think they are telling me.  Do you think it's possible to do a reformat and rid myself of this?  The scan showed the following:
No viruses were detected in memory.
Your computer is free of known threats. Virus Detection does not check compressed files.
Your computer appears safe for now. For real-time protection from viruses, hackers and privacy threats, upgrade to Norton Internet Security™
C:\WINDOWS\system32\mos.exe is infected with Adware.Wurldmedia
C:\WINDOWS\system32\uninstall.exe is infected with Adware.Wurldmedia
C:\RECYCLER\S-1-5-21-3796248581-2197137326-3466646556-1003\Dc318.exe is infected with Trojan.Adclicker
I have a HP Pavilion 304W so I can reformat using the system restore and do a complete restore that starts me over as if it were new, I think.
Thanks for the help1


-------------------------

Followup To

Question -
I am running XP and my AV software is provided to me with my ISP, it's name being ETrust ezAntivirus. I also have Adaware and Spybot installed.  I ran my virus software because I got a link to look at airfare with SpiritAir and it told me I had a virus at the same time that page was trying to load.  I think I got the virus from that page.  The above name could also be w32.1st.AS, I can't distinguish between the 1 or an L.  In any case none of the programs I have are removing it and I don't know what it is or if it affects my outlook express.  Any information about this and hopefully remove it is appreciated.

Answer -
Hi Denise,

Even though you have EZTrust installed, I would suggest using Internet Explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Before scanning with either Ad-aware SE or Spybot, make sure you check for updates first.

Hope this helps!
Lorry  

Answer
Follow-up

Hi Denise,

The following site has information on how to remove Trojan.Adclicker:

http://www.symantec.com/avcenter/venc/data/trojan.a.d.clicker.html

Hope this helps!
Lorry


Hi Denise,

You could do a system restore to factory condition, if you feel safer. Backup anything of importance first. Otherwise, you could have one of your friends who knows more about comuters, follow the directions given at the following site to remove the Adware.Wurldmedia:

http://www.symantec.com/avcenter/venc/data/adware.wurldmedia.html

Hope this helps!
Lorry