Email this page

This is a password-stealing virus written specifically for users of America Online.

The symptom that indicates that this virus has infected a computer occurs when restarting or shutting down the computer. The display appears dimmed as normal, and then returns to the desktop. This is usually seen after using America Online or gateway.net 5.0, and the computer locks up or does not respond.

Most antivirus programs, if up-to-date, can detect and clean this virus.

More information about this virus is available on the Symantec Web site at: http://www.symantec.com/avcenter/venc/data/pwsteal.trojan.html

The following steps determine if the computer is infected with the PWSteal.Trojan virus.

1. From the Start menu, point to Programs, and then click Windows Explorer.

2. In the Exploring window, click the View menu, and then click Folder Options.

3. In the Folder Options dialog box, click the View tab.

4. On the View tab, in the Advanced settings box, click Show all files, and then click OK.

5. In the Exploring window, click the Tools menu, point to Find, and then click Files or Folders.

6. In the Find: All Files window, in the Named box, type: Msdos98.exe. Verify that drive C appears in the Look In box, and then click Find Now.

7. If Msdos98.exe is found, the computer is infected with the virus.

Make sure you are protected from the effects of this, or other viruses. The Gateway Accessory Store sells products which will help to protect you from damage caused by a virus, including anti-virus software and backup hardware.