newbie - pls help with removing trojan

had nortons site scan me.. found trojan adwaheck in c:\windows\system32\opengl32.exe

says to delete file and registry entry. found registry entry in hkey_current_user\software\microsoft\windows\currentversion\run where norton said it would be.

also after reading this forum looked and found it checked in msconfig startup

i guess my questions are.. is opengl32.exe a real file i need? as in need to replace it after i delete the trojan one? if so where do i find it. or is it just a fake, un-needed file i can zap? oh and yes it's loaded and running.. can i still delete it while windows thinks it wants to use it? (xp pro btw).

if i zap the file, delete the registry entry, and uncheck the startup box is that all i need to do or do i need to look at other things?

btw.. also (as i've seen mentioned in threads here) i too had weird problems with my notepad.. couldn't open it...checked properties and the target path was set to something weird (actmovie?) in one user profile and in the other a path that didn't exist. i DID find notepad in c:\windows and set the paths to that. all works ok but i did findsomething else that is something i'm not sure is right.... there is a line in my win.ini file under programs notepad=c:\windows\notepad.exe that is the ONLY program listed there... thought it was odd cuz of my notepad prob. is it supposed to be there????

thanks so much in advance.

g-w
Sun Jun 27 17:14:39 CDT 2004

little lost cow wrote:

> had nortons site scan me.. found trojan adwaheck in c:\windows\system32\opengl32.exe
>
> says to delete file and registry entry. found registry entry in hkey_current_user\software\microsoft\windows\currentversion\run where norton said it would be.
>
> also after reading this forum looked and found it checked in msconfig startup
>
> i guess my questions are.. is opengl32.exe a real file i need? as in need to replace it after i delete the trojan one? if so where do i find it. or is it just a fake, un-needed file i can zap? oh and yes it's loaded and running.. can i still delete it while windows thinks it wants to use it? (xp pro btw).
>
> if i zap the file, delete the registry entry, and uncheck the startup box is that all i need to do or do i need to look at other things?
>
> btw.. also (as i've seen mentioned in threads here) i too had weird problems with my notepad.. couldn't open it...checked properties and the target path was set to something weird (actmovie?) in one user profile and in the other a path that didn't exist. i DID find notepad in c:\windows and set the paths to that. all works ok but i did findsomething else that is something i'm not sure is right.... there is a line in my win.ini file under programs notepad=c:\windows\notepad.exe that is the ONLY program listed there... thought it was odd cuz of my notepad prob. is it supposed to be there????
>
> thanks so much in advance.

There were some old OpenGL files by that name to upgrade Win 95, Win XP
does not have them unless some game installed the file. To be safe you
can move it somewhere safe and see if something goes wrong.

g-w