Virus Info.Pls Help! 1

[livesfreely]

I have two viruses on my pc running win98. The names are:
1. Keylog-LfzMph
2. BackDoor-AMS

I use AVG virus scan which didn't detect them. Since, I knew the computer was infected somehow, I tried different antivirus programs. My last resort was the McAfee online Virus scan. That is the only one that found the viruses, but the free online scan doesn't remove these viruses. I searched the web and couldn't find any information on these viruses. I don't how to remove them. Can someone help me with this?
Virus #2 has an entry in win.ini and system.ini at the run and shell = C:/windows/winsys32.exe
I tried removing these entries, but it didn't work.
I also get a message when I start my pc. Message is(a dialog box)-
connect:WSocketResolveHost:cannot convert host address 'ns1.arpa.net',Error #11001
I don't have any other symptoms, currently.
I hope someone can help me with this. Thanks

 

[AngelNicest]

I deleted above mentioned registry entries.I killed the process using process explorer. Deleted the file from windows folder and recycle bin and restarted. The registry entries didn't appear again. Then, I ran online virus scan again and that virus/trojan didn't show up again. But I still have the 'Keylog-lfzmph' Virus scan shows the file win_spool.dll in windows/system folder. I can't find any such file on my pc

 

[SYAR2003]

Make sure to enable view on hidden files
and on system files.

Explorer -Tools -Folder options -view

Remove the checkmark on:
"hide protected operating system files"
"hide extensions for known filetypes"

Place a checkmark on:
"Display the contents of system folders"
"Show hidden files and folders"


Then do a search on the file
Select:
All files and folders
filename *spool*.exe

More advanced options
"Specify the searc to search in hidden files and folders"
"And system folders"
"And search subfolders"

Search

 

[livesfreely]

thanks syar2003

 

[SYAR2003]

So...
did you find anything .
Whats the result.

 

[livesfreely]

yes I removed the file and registry entries. then ran the virus scan and it showed up clean.