wootbot.gen & trojan spy.win32.pcspy.6

PC is really slow and online scan shows these -
c/windows/crrst32.exe (trojan spy.win32.pcspy.6)
c/windows/system32/wind32z.exe (backdoor.win32.wootbot.gen)
c/windows/system32/wind32z.exe (backdoorwin32.wootbot.gen)

how do i get rid of them? norton doesn't see them
numerous google searches come up with lots of aliases but no removal
instructions only 'pay to remove' is there a
cure???????????????help.....please....

Get Sysclean from here :
http://www.trendmicro.com/download/dcs.asp

READ the " readme_sysclean.txt "
http://www.trendmicro.com/ftp/products/tsc/readme.txt

Download the latest pattern file from here :
http://www.trendmicro.com/download/pattern.asp

Extract it to the Sysclean folder.
Enable " Show hidden files and folders " :
http://forum.aumha.org/viewtopic.php?t=6213

Boot to Safe Mode and run sysclean.com by double clicking it.
Sysclean is VERY thorough and will take some time to scan/disinfect
the system. If you find that there are infected files in the
System Volume Information folder than you will have to either flush
System Restore of all restore points or use Cleanup to remove all
but the most recent ones.
Go to Start, Run, Programs, Accessories, System Tools, Disk Cleanup.
Choose the drive, click OK. Click the More Options tab. Click the
System Restore button. Click Yes > This will remove all but the most
recent restore points.
IF THE MOST RECENT ONES are also contain infected files, flush the
entire System Restore hierarchy :

How to turn on and turn off System Restore in Windows XP
http://support.microsoft.com/?kbid=267951


MowGreen [MVP]
===============
*-343-* FDNY
Never Forgotten
===============


baaa, baaa, baaa! wrote:

> PC is really slow and online scan shows these -
> c/windows/crrst32.exe (trojan spy.win32.pcspy.6)
> c/windows/system32/wind32z.exe (backdoor.win32.wootbot.gen)
> c/windows/system32/wind32z.exe (backdoorwin32.wootbot.gen)
>
> how do i get rid of them? norton doesn't see them
> numerous google searches come up with lots of aliases but no removal
> instructions only 'pay to remove' is there a
> cure???????????????help.....please....

Thanks for the info have downloaded the prog will give it a go and see if it
cures problems. One more thing - I have PC-Cillin 2002, but havent installed
it as it conflicts with Norton Anti-Virus any idea how to overcome conflict
so as to run one after the other, or any ideas which is the superior
anti-virus prog?

"MowGreen [MVP]" wrote:

> Get Sysclean from here :
> http://www.trendmicro.com/download/dcs.asp
>
> READ the " readme_sysclean.txt "
> http://www.trendmicro.com/ftp/products/tsc/readme.txt
>
> Download the latest pattern file from here :
> http://www.trendmicro.com/download/pattern.asp
>
> Extract it to the Sysclean folder.
> Enable " Show hidden files and folders " :
> http://forum.aumha.org/viewtopic.php?t=6213
>
> Boot to Safe Mode and run sysclean.com by double clicking it.
> Sysclean is VERY thorough and will take some time to scan/disinfect
> the system. If you find that there are infected files in the
> System Volume Information folder than you will have to either flush
> System Restore of all restore points or use Cleanup to remove all
> but the most recent ones.
> Go to Start, Run, Programs, Accessories, System Tools, Disk Cleanup.
> Choose the drive, click OK. Click the More Options tab. Click the
> System Restore button. Click Yes > This will remove all but the most
> recent restore points.
> IF THE MOST RECENT ONES are also contain infected files, flush the
> entire System Restore hierarchy :
>
> How to turn on and turn off System Restore in Windows XP
> http://support.microsoft.com/?kbid=267951
>
>
> MowGreen [MVP]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> baaa, baaa, baaa! wrote:
>
> > PC is really slow and online scan shows these -
> > c/windows/crrst32.exe (trojan spy.win32.pcspy.6)
> > c/windows/system32/wind32z.exe (backdoor.win32.wootbot.gen)
> > c/windows/system32/wind32z.exe (backdoorwin32.wootbot.gen)
> >
> > how do i get rid of them? norton doesn't see them
> > numerous google searches come up with lots of aliases but no removal
> > instructions only 'pay to remove' is there a
> > cure???????????????help.....please....
>
>