haxdoor

[Darryl]

I've been unable to delete this trojan using many
different means. Does anyone know a sure fire method?

 

[bill sanderson]

This has variants. If you search at Symantec (perhaps via
google (haxdoor symantec manual removal) as a key--you
will get at least three different articles. Compare the
characteristics of these articles with the one you have--
or scan with Symantec's scanner online
(http://security.symantec.com) to find your precise
variant if possible.

If the online scan removes it that'd be good--otherwise
I'd go with trying to reverse the actions that Symantec
outlines that it takes on installation--their manual
removal instructions are moderately useless in this case,
as I recall (run our product!)

 

[Darryl]

I tried all of the manual methods on Symantec, and
Microsoft Spyware found it and removed it but it came
back on reboot even when I scanned in safe mode. I hope
something comes out soon to delete this. The worst part
of this is that it kept restarting my computer. I have
that issue under control now.

 

[Guest]

Actually, I did turn off system restore and it was still
detected by several programs. I would like to find what
it is attached to that is running because when I go to
delete certain folders, I'm unable to do so.

 

[Bill Sanderson]

You need HijackThis and Ron Kinner, I think--look for his messages for
contact info. You might also look into F-secures Blacklight and
Sysinternals RootKitRevealer.

 

[Steve Wechsler [MVP]]

Darryl,

Here's a step by step guide to removing the Backdoor.Haxdoor.D.
If the same variant of it is whathas infested the system, then give it a
shot:
http://www.bleepingcomputer.com/for...com_and_BackdoorHaxdoorD_Analysis-t10501.html

Steve Wechsler (akaMowGreen)
MS-MVP 2004-2005

===============
*-343-* FDNY
Never Forgotten
===============

 

[plun]

Steve Wechsler [MVP] wrote on 2005-05-17 :

Darryl,

Here's a step by step guide to removing the Backdoor.Haxdoor.D.
If the same variant of it is whathas infested the system, then give it a
shot:
http://www.bleepingcomputer.com/for...com_and_BackdoorHaxdoorD_Analysis-t10501.html

Great "Reading room" ..... !

http://www.bleepingcomputer.com/forums/Spyware_and_Malware_Self_Help_and_Reading_Room-f55.html



By the way, MowGreen is logged in.....