need to find latest information on this Trojan Horse and it's possible 
new varieties.  Need removal tool info and/or virus/trojan horse
definition and who has it.

---

Request for Question Clarification by hummer-ga on 26 Dec 2004 04:50 PST

Hi batcave,

Could you please follow steps 1, 2, & 3 carefully at the following
link and then report back on how you made out. If they haven't solved
your problem, go to step 4 and post your HijackThis log here.

KRC Anti-Spyware Tutorial
http://www.greyknight17.com/spyware.htm

It would also be helpful to know what is happening to your computer
(what are the symptoms).

I'll look forward to your update,
hummer

Hi batcave!!

The virus ie0199 is an old trojan that appears in January, 1999.
If you want to remove it from your computer follow the instructions at
the following page, you also get additional information on what this
trojan changed on your system:
"MA-003.021999: IE0199.exe Trojan Horses":
http://www.mycert.org.my/virus-info/ie0199.htm


Before you start the removal procedure do the following:

1- If you have Windows XP or Me disable System Restore feature:
"Disabling or enabling Windows XP System Restore":
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam


2- Reboot your computer in safe mode:
"Starting your computer in Safe mode":
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

or
"Getting into Windows Safe Mode":
http://www.computerhope.com/issues/chsafe.htm


The following instructions pages will be useful:
"Editing the Registry":
http://www.winguides.com/registry/article.php?id=1&page=3

"How To Search for Files and Folders in Windows XP":
http://support.microsoft.com/default.aspx?scid=kb;en-us;308895&sd=tech

"Using the Task Manager":
http://support.microsoft.com/default.aspx?scid=%2Fdirectory%2Fworldwide%2Fen-gb%2Ftask.asp


I also suggest you to perform some online scans:
"Trend Micro - Free online virus Scan":
http://housecall.trendmicro.com/

"GFI - Free online Trojan scanner:
http://www.trojanscan.com/

"PestPAtrol's free online spyware scanner":
http://www.pestscan.com/ScanOrTrial.asp


If after all these tasks you still have troubles with your PC please
download and run HijackThis and post the
log without fixing anything using the clarification feature. I will
indicate you which things must be fixed.
To download the last version of HijackThis:
http://www.majorgeeks.com/download3155.html

Here are two quick guides that will help you to use it and will show
you how to generate the log:
"HijackThis Tutorial":
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

At the last page please read the "How to use HijackThis" section:
Here you will learn to scan and generate the log and how to post it also.
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42#HowToUse


Please if you use HijacckThis I suggest you to don't fix anything if
you are not sure of what is that, you can compromise the Windows
system if you delete something that must not be fixed. Just post the
log and I will indicate you what must be fixed.


Finally I suggest you to install and use one of the following free
antivirus, they are both well reputed:
"avast! 4 Home Edition":
http://www.avast.com/eng/down_home.html

"AVG antivirus":
http://free.grisoft.com/freeweb.php/doc/2/

----------------------------------------------------------

Additional references for the IE0199 trojan:
From McAfee:
http://vil.nai.com/vil/content/v_10134.htm

From F-Secure:
http://www.europe.f-secure.com/v-descs/antibtc.shtml

From VirusList.com:
http://www.viruslist.com/en/viruslist.html?id=3874

From PestPatrol Pests Encyclopedia:
http://www.pestpatrol.com/pestinfo/m/mprexe.asp


----------------------------------------------------------

Search strategy:
ie0199
mprexe



I hope that this helps you. Remember that this answer is not
considered ended until you feel satisfied with it. Please use the
clarification feature to request for further assistance if you need it
before rate this answer, I will be glad to respond all your requests
of help related to your question.

Best regards.
livioflores-ga