Unsolved

This post is more than 5 years old

1 Rookie

 • 

17 Posts

4767

February 23rd, 2006 16:00

Question on NetSpy trojan horse

I need some help understanding what I should do next with removing some spyware I think is on my PC. 
 
I am using Norton AntiVirus 2006 AntiVirus Program, Lavasoft's Ad-Aware Anti Spyware program, and Zone Alarm's Firewall.  Whenever I access my FAX program, I receive a pop-up signal from my Norton AntiVIrus program telling me that it has blocked a spyware from accessing the Internet.  The message says "Default block Netspy Trojan Horse", with a pathway of "C:\Windows\System32\fxscInt.exe".
 
I searched Norton/Symantec's on-line site on removing viruses, and found specific information on deleting the Netspy Trojan Horse".  However, when I follow their instructions, I do not find the files that say to delete.  For example, they ask me to delete "Nsutil.exe" from my System 32 files -- but there is no such program there.  I have searched for all variations that Norton says might be on the system, netspy.exe, nconfig.exe, nsutil.exe, and nsys.exe, but none are on my PC.  I also looked in the pathway that the spyware supposedly is located, System32\fxscInt.exe, but again there is no such file on my PC.
 
Norton's instructions, after deleting this file I cannot find, wants me to restart my PC in Safe Mode, run a scan, then start deleting items in my system registry.  I really don't want to mess with the system directory unless I have to, and I am wondering if I need to since I cannot find any of the exe files Norton has mentioned on my PC.
 
Has anyone run across this before?  Or, does anyone know whether or not I should chance it and fiddle with the system registry, looking for the files to delete there even if I couldn't find the first set?  I would back up my registry before doing so.
 
If possible, please reply to my EMail at lmendol@yahoo.com
 
Thanks for the help!

47 Posts

February 24th, 2006 11:00

Hello, lmendol,
 
I guess that possibly you were not able to locate files, because they might be hidden. Also, you have to be very carefull deleting harmful files. Please try to follow some visual instructions on manual removal of harmful files. You will find information how to locate and how to delete parasites manually.
 
If the problem still persists, please go through HijackThis tutorial and see what parasites harms your computer or paste a fresh log  here and some expert will take a look on it for you. 

1 Rookie

 • 

17 Posts

February 24th, 2006 14:00

Thank you for your suggestion.  I tried all the options you suggested, and all "View" options suggested in the article are as the article suggests -- but the files I am told to delete are still not showing up.  I went to the tutorial you suggested and it goes straight to deleting lines from the registry.  Here is my BIG question.  Even if I do not see the nsutil.exe, or similar, files to delete, would I still be able to remove the trojan horse by going to the registry and deleting the lines listed in Norton's instrustions?

34 Posts

October 9th, 2006 08:00

I know this is old, but in case you never found out what "C:\Windows\System32\fxscInt.exe" was... it's the Windows XP Fax program. See: http://www.microsoft.com/windowsxp/using/setup/learnmore/crawford_02october21.mspx. Apparently, NIS 2006 has a false positive for this.
No Events found!

Top