backdoor.madfind

[Bob]

Hi Group,
I'm infected with backdoor.madfind. Symantec says to find the infected files
and delete them. They are Windows/system32/svc.exe, and
Windows/system32/browserhelper.dll. I can't delete them as I get the message
that the disk is full or write protected. I looked on the Windows CD and
wasn't able to find the same files, thinking maybe I could just overwrite
them. Any ideas would be appreciated.
Bob

 

[Lorry]

Hi Bob,

http://securityresponse.symantec.com/avcenter/venc/data/bac
kdoor.madfind.html

At the above site it mentions:

Windows XP

1. Click Start, and then click Search.
2. Click All files and folders.
3. In the "All or part of the file name" box, type, or
copy and paste:

BrowserHelper.dll
4. Verify that "Look in" is set to "Local Hard Drives"
or to (C.
5. Click "More advanced options."
6. Check "Search system folders."
7. Check "Search subfolders."
8. Click Search.
9. Delete the displayed file.

You should be able to delete the file from the Found area.

Hope this helps!
Lorry

 

[JBM]

Hi Group,
I'm infected with backdoor.madfind. Symantec says to find the infected files
and delete them. They are Windows/system32/svc.exe, and
Windows/system32/browserhelper.dll. I can't delete them as I get the message
that the disk is full or write protected. I looked on the Windows CD and
wasn't able to find the same files, thinking maybe I could just overwrite
them. Any ideas would be appreciated.
Bob

If you still can't delete them after searching as per
lorry's instruction. Boot to safemode command prompt.
That's the only way I was able to delete a file Mcafee
virusscan said was infected with a virus.

 

[Bob]

Thanks for your responses. I was able to delete them both in safe mode. I
hope the system is OK without the svc.exe file. Anyone know what it does?