SP2 then a trojan in hardwin.exe

I updated one of my systems last week witht the SP2 update. Since then I have
found with Nortans a virus (trojan) that is located in a file called
hardwin.exe that is located in the c:\windows\windowsupdatesetupfiles\ .

My Nortans has been unable to clean the file. I am unable to delete it
either.

>-----Original Message-----
>I updated one of my systems last week witht the SP2
update. Since then I have
>found with Nortans a virus (trojan) that is located in a
file called
>hardwin.exe that is located in the
c:\windows\windowsupdatesetupfiles\ .
>
>My Nortans has been unable to clean the file. I am
unable to delete it
>either.
>.
>
I don't think that come from the sp2 update unless you git
it from an other source that M$.
I don't have that file nor that directory.
Usually you can't delete because it maybe used by a
working program.
try safe mode a) virus scan and repair
or b) delete the file.
if you delete it some program may not work.
Can't find any information on hardwin.exe.

1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt186.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




"Eggs are great" <Eggs are > wrote in message
news:EEA0821B-CBB7-4D86-85FC-...
| I updated one of my systems last week witht the SP2 update. Since then I have
| found with Nortans a virus (trojan) that is located in a file called
| hardwin.exe that is located in the c:\windows\windowsupdatesetupfiles\ .
|
| My Nortans has been unable to clean the file. I am unable to delete it
| either.