Re: What is Backdoor.Winbach as reported by eTrust Pest Patrol scan?

Thanks for the tips.

Do you happen to know if I go back to a previous restore point whether that
might also get rid of whatever found its way onto my computer?

Thanks.

Michael


"Maurice N ~ MVP" <maurice@xxxxxxxx> wrote in message
news:OFtll0xoFHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
This link at MS is a database of DLL files for MS Windows as well as other
programs.
DLL Help Database http://support.microsoft.com/dllhelp/

DSCAN16 & DSCAN32 are not Windows or MS dlls. Delete them. Let them sit in
your Recycle Bin for a while. Then rerun your antivirus.

Turn off your antivirus If and when you run another antivirus utility, and
any malware detector.

Here's one free virus-cleanup tool to use, even though it will involve time
and effort. I suggest you get & run SYSCLEAN from Trendmicro.

See PA Bear's notes on Sysclean from TrendMicro.
Scanning with SYSCLEAN Robear's way
http://aumha.net/viewtopic.php­?t=10610

--
Maurice N
MVP Windows - Shell / User
-----

Michael wrote:
> I have XP sp2 running on my Compaq Presario M2105US notebook.
>
> RoadRunner provides my Internet connection and Time Warner also
> provides a suite of virus, firewall, spyware programs from Computer
> Associates. eTrust Pest Patrol is one of those programs and when I
> ran it just a while ago it indicated that I had "Backdoor.Winbach"
> and two files were singled out C:\WINDOWS.dscan16.dll and
> C:\WINDOWS.dscan32.dll
>
> When I went to the CA website to research removing this thing, it
> gave a long list of running processes that I was supposed to kill
> (none of them were running on my system as far as I could tell), a
> longer list of DLL's that I was supposed to unregister (over my head)
> and a long list of file I was supposed to remove (none of them
> existed when I searched for them).
>
> So is this a real threat or is it some sort of false alarm or what?
> If I do indeed have some sort of Backdoor trojan horse or whatever,
> won't my firewall alert me to someone trying to contact the program?
> Can I safely delete just the dscan16.dll and dscan32.dll files, or
> will that have an adverse effect on other aspects of my computer.
>
> In short, is this anything to worry about?
>
> Michael


.

Relevant Pages

  • Re: Internet Explorer
    ... > Running Windows XP SP2 all updates, black ice firewall, no antivirus ... version antivirus using updated definitions. ... TrendMicro's Sysclean. ... For Windows Temporary files, Start>Run cleanmgr. ...
    (microsoft.public.windowsxp.general)
  • Re: Virus? BSOD and cant connect to antivirus sites.
    ... You may have a virus that breaks antivirus programs, ... Start by running TrendMicro's Sysclean, ... Create a new folder on your Desktop or the C: ... If you are running Windows ME or XP, ...
    (microsoft.public.windowsxp.general)
  • Re: sp.html spyware homepage high jacker Severity HIGH
    ... I also wouldn't expect Panda or any other virus software ... There are 2 DLLs involved, the "BHO" DLL which you see in your log and the ... "Windows" and close RegLite. ... > If Panda Antivirus or Panda ActiveScan detects StartPage.FH during the ...
    (microsoft.public.windowsxp.general)
  • Re: What is Backdoor.Winbach as reported by eTrust Pest Patrol scan?
    ... This link at MS is a database of DLL files for MS Windows as well as other programs. ... DLL Help Database http://support.microsoft.com/dllhelp/ ... I suggest you get & run SYSCLEAN from Trendmicro. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: What is "Backdoor.Winbach" as reported by eTrust Pest Patrol?
    ... This link at MS is a database of DLL files for MS Windows as well as other programs. ... DLL Help Database http://support.microsoft.com/dllhelp/ ... I suggest you get & run SYSCLEAN from Trendmicro. ...
    (microsoft.public.security.virus)