Getting rid of a Trojan Virus

[Guest]

My other computer was struck by a trojan virus, the Backdoor Haxdoor one to
be exact. Norton was however unable to isolate this file or even find it. I
have run scans with every product I can find whether in product or online and
they found every virus my norton had missed, except this Backdoor one. The
virus has specifically attached itself to C:\Windows\Systems32\pptp32.dll. I
havent been able to find some help anywhere and nothing seems to be working.
Thanks

 

[Carey Frisch [MVP]]

Please consult the experts in the virus removal newsgroup:
news://msnews.microsoft.com/microsoft.public.security.virus

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------­----------------

:

| My other computer was struck by a trojan virus, the Backdoor Haxdoor one to
| be exact. Norton was however unable to isolate this file or even find it. I
| have run scans with every product I can find whether in product or online and
| they found every virus my norton had missed, except this Backdoor one. The
| virus has specifically attached itself to C:\Windows\Systems32\pptp32.dll. I
| havent been able to find some help anywhere and nothing seems to be working.
| Thanks

 

[John John]

It appears to be a rootkit! Try searching for "Haxdoor rootkit" you
should get some information.

John

 

[MowGreen [MVP]]

CastleCops has a Haxdoor variant fix that just *may* be able to remove
this malware. Advise you to post to their malware removal forum after
first reading the guidelines :

Hijackthis Guidelines - Read Before Posting
http://castlecops.com/t102301-Hijackthis_Guidelines_Read_Before_Posting.html

Forum :
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Or, you could run the Microsoft Malicious Software Removal Tool :
http://support.microsoft.com/kb/890830
Followed up by a scan with F-Secure's Blacklight Beta. Download it to
the Desktop. Then create a shortcut to it on the Desktop.
Right click on that shortcut and then choose Properties.

When the Properties page comes up, find the box labeled TARGET and add
/Expert
It should look exactly like this:

"C:\Documents and Settings\<YourUserName>\Desktop\blbeta.exe" /Expert

Then run it fom the shortcut. NOTE: <YourUserName> represents the User
account that you use. It's just a sample, not the name of your account.
Also, C:\ is usually the root drive for most systems. Your's may vary.
Enter the root drive (the drive where the WINDOWS directory is located)
for your system if that's the case.

MowGreen [MVP 2003-2006]
===============
*-343-* FDNY
Never Forgotten
===============