Discovered: September 15, 1999
Updated: February 13, 2007 11:58:02 AM
Also Known As: Count2K, Y2KCOUNT, Troj_Polyglot
Type: Trojan Horse, Virus
To remove this Trojan horse from your computer:
- Click Start, and click Run.
- Type sysedit and click OK.
- Click the System.ini window.
- Click Search, and click Find.
- Type ntsvsrv.dll and then click Next. It should be at the end of the drivers= line.
- Remove the Ntsvsrv.dll entry.
- Restart Windows into MS-DOS mode. Restarting to MS-DOS mode ensures that Wsock32.dll is not loaded (Wsock32.dll is used for Internet connections).
- Type cd \windows\system to change to the \Windows\System folder.
- Type dir wsock32.dll to check the size of Wsock32.dll.
- If the size is 14848 bytes, the Trojan horse program has replaced it with Proclib16.dll. To restore the original Wsock32.dll, type
copy nlhvld.dll Wsock32.dll
and then press Enter.
- Delete the following files from the \Windows\System folder:
- Proclib.exe
- Proclib.dll
- Proclib16.dll
- Ntsvsrv.dllL
- Nlhvld.dll
Technorati
Digg
Delicious
Reddit
StumbleUpon
Yahoo Buzz
Twitter
Facebook
Newsvine