Re: backdoor trojan in windows XP

From: Trafton (traftonofjj2SPAM_at_yahoo.com)
Date: 09/30/04 

Date: Wed, 29 Sep 2004 16:32:10 -0700

Hi Sue,

Fortunately this is a common problem which can be solved easily. :)

All you need to do is run the scan in safe mode. You can find information on
booting into safe mode here:

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

Also, here is some information about this program:

http://vil.nai.com/vil/content/v_128081.htm

If you have any more concerns or questions, feel free to post them here.
Hope this helps!

Sincerely,
Benjamin "Trafton" Johnstone-Anderson
Microsoft MVP, Windows Security
Security Manifest: www.msmvps.com/trafton/

"Sue" <anonymous@discussions.microsoft.com> wrote in message
news:10bd01c4a67b$e6b11650$a401280a@phx.gbl...
> My symantec is telling me I have a "backdoor trojan" in
> sys32 wsrv.dll It can not delete it. It's been there
> for over a month now. When I try to delete it myself it
> won't work because the system is always running. Have
> been running all types of scans from freebie sites that
> have been suggested to other people with trojan
> infections, but don't want to pay for the removal for a
> program upgrade that might not work. Any suggestions? I
> know how to go into regedit but haven't found anything
> yet.

Relevant Pages

  • Re: backdoor trojan in windows XP
    ... but did try it again at your suggestion. ... >Fortunately this is a common problem which can be solved ... >All you need to do is run the scan in safe mode. ... >> program upgrade that might not work. ...
    (microsoft.public.security.virus)
  • Re: Windows XP Log On (ive done everythng!)
    ... Looking through all the postings this seems to be a fairly common problem ... Hitting CTL-ALT-DEL twice ... doesn't get the Administrator icon even in Safe Mode, ... > can see about the other accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: I need help
    ... which means you have to restart into safe mode to remove ... system restore. ... Microsoft MVP, Windows Security ...
    (microsoft.public.scripting.virus.discussion)
  • Re: remove film
    ... this is a common problem for XP if file is slightly corrupt, ... to build a thumbnail icon but never really gets there, ... found to delete the files is to reboot into safe mode, ...
    (microsoft.public.windowsxp.video)
  • Re: agobot.25.m
    ... safe mode and you will be able to successfully remove the file. ... Microsoft MVP - Windows Security ... > cant get rid of it,ive updated avg etc but still no hope ...
    (microsoft.public.security.virus)