I have a user who has backdoor.madfind that Norton is detecting but
removal instructions won't clean up.

https://www-secure.symantec.com/avce...r.madfind.html

I am not finding anything on this on any other sites. What other name
is this going by, and what can be don't to get rid of this?

thanks,

Hal

On Mon, 03 Nov 2003 09:10:08 -0700, (E-Mail Removed) wrote:

>I have a user who has backdoor.madfind that Norton is detecting but
>removal instructions won't clean up.
>
>https://www-secure.symantec.com/avce...r.madfind.html
>
>I am not finding anything on this on any other sites. What other name
>is this going by,

If the malware isn't too recent you can usually find alias names by
using Project VGREP here:

http://www.virusbtn.com/resources/vgrep/index.xml

However, this turned up zero results so I'd guess the malware is too
recent.

>and what can be don't to get rid of this?

So you followed the instructions, both implicit and explisit, and the
backdoor is still active after a reboot? Is that it? Or what exactly
is the problem?


Art
http://www.epix.net/~artnpeg

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I have a user who has backdoor.madfind that Norton is detecting but
> removal instructions won't clean up.
>
> https://www-secure.symantec.com/avce...r.madfind.html
>
> I am not finding anything on this on any other sites. What other name
> is this going by, and what can be don't to get rid of this?
>
> thanks,
>
> Hal

Try booting into Safe Mode 1st, before following Symantec's directions.