Trojan Fix - I hope

[Tom Sixt]

I'm working on a Dell demension 2400 that has been
infected with the Trojan Virus. Symantec fixed 70-80 files
but I still have 2 that I'm having trouble with.
(svchost.exe and iddffaa.dll) The svchost I'm thinking of
overlaying from a machine that is not infected but keep
getting the message that the file is in use. I have not
tried this in safe mode yet. The iddffaa.dll is the Trojan
startup file and I'm fairly sure I can just delete it from
the registry but wanted to make sure.

Any insight or help would be greatly appreciated.

Thanks.

Tom Sixt

 

[Guest]

Have you confirmed the svchost.exe is not the problem? Did you look for
any suspicious startup svchost.exe programs? (especially ones that are using
way to much CPU)
Here is a link that may help.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;314056
This tool can show you what is starting and look for suspicious files
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml - There are
other tools at this site that may be able to help.