"Backdoor.Trojan" HELP!!! [Archive] - Glock Talk

PDA

View Full Version : "Backdoor.Trojan" HELP!!!


G26AZ
10-21-2004, 04:32
Help! My kids have been using my laptop,and now it's infected with a virus called the "Backddor.trojan." I have Norton AV program which identifies what it is, but is unable to delete it. I've delelted everything I can find (some of the things won't let you delete them...) but when I re-start the computer and go to IE, it's all back again with pop-ups, porno ads, etc.
Any and all help or suggestions would be appreciated!
Thank you in advance!

HerrGlock
10-21-2004, 04:45
Cleaning infected machines without an installed antivirus software
1. Download the Sysclean Package from a clean or uninfected machine.

2. Create a temporary folder (e.g., c:\temp) and copy SYSCLEAN.COM into this folder. This temporary folder should be on a local or mapped drive.

3. Download the latest pattern file. Extract the downloaded ZIP pattern file into the created folder.

4. Extract the pattern file into the same folder.

5. Run the SYSCLEAN.COM executable file.

Note: This fix tool generates the SYSCLEAN.LOG log file, in its current folder. This tool will also take care of memory resident viruses and clean all the viruses remaining such as registry entries, dropped files, and processes utilized by the malware.

If you are not a Trend Micro customer please download the following file.

Sysclean Package 2.1MB
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

MD5 checksum: 63649AEBAC673CB2B3BE5A7E8A7F8111

NOTE:
For instructions on how to use this package, consult the "How to Use" section of the readme file, readme_sysclean.txt. This file also contains the description and the different features of this package.

Note that for the Trend Micro Sysclean Package to be effective, you must download and place the latest pattern file in the same folder as the Trend Micro Sysclean Package.

Read this (print it out so you can read while putzing with your computer)
http://www.trendmicro.com/ftp/products/tsc/readme.txt

Generalcarry
10-27-2004, 11:36
Go to www.snopes.com
Do a search for backdoor virus
Follow instructions.

David_G17
10-27-2004, 11:47
i got that same virus this morning!!!

turns out, its a trojan designed to allow a hacker to install more trojans. so, you may have more than you think.

have you updated norton? i think it killed mine.

MikeG22
10-27-2004, 17:03
Download this:
http://www.emsisoft.com/en/software/free/

It's a free trojan and worm scanner that does a great job of finding and removing what norton misses. If you upgrade to the personal it can run in the background to prevent infections but just using the scan will get rid of them.

srhoades
10-28-2004, 02:29
If you boot into safe mode you will be able to delete the infected files. Make the necessary registry changes (if applicable) and your done.

G26AZ
10-31-2004, 11:36
Thanks to everyone for their help. Between adding Windows SP2, upgrading Norton, running Spybot several times, etc., I think it's taken care of. Thanks again.