Trojan Problem (vdmt16.sys)



Walt
07-09-2005, 10:48 PM
I am attempting to help a client with the Haxdoor.d virus and using both
Microsoft AntiSpyware and Symantec AntiVirus 2005 both with updated
definitions, I was successfull in getting rid of all problems except one.
That is the dll file named drct16.dll was not deleted due to a rights issue.
Even with the Administrator rights I have been unable to rename, move, delete
or anything with this Virus File.

Do you have any suggestions in how to remove or delete this file?

Thanks,

David H. Lipman
07-09-2005, 10:48 PM
From: "Walt" <Walt@discussions.microsoft.com>

| I am attempting to help a client with the Haxdoor.d virus and using both
| Microsoft AntiSpyware and Symantec AntiVirus 2005 both with updated
| definitions, I was successfull in getting rid of all problems except one.
| That is the dll file named drct16.dll was not deleted due to a rights issue.
| Even with the Administrator rights I have been unable to rename, move, delete
| or anything with this Virus File.
|
| Do you have any suggestions in how to remove or delete this file?
|
| Thanks,

Do you have a file called
C:\windows\SYSTEM32\mszx23.exe


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Walt
07-09-2005, 10:48 PM
Yes there was David, I am not currently at the infected system. I believe
this file was either removed or quarntined.

"David H. Lipman" wrote:

> From: "Walt" <Walt@discussions.microsoft.com>
>
> | I am attempting to help a client with the Haxdoor.d virus and using both
> | Microsoft AntiSpyware and Symantec AntiVirus 2005 both with updated
> | definitions, I was successfull in getting rid of all problems except one.
> | That is the dll file named drct16.dll was not deleted due to a rights issue.
> | Even with the Administrator rights I have been unable to rename, move, delete
> | or anything with this Virus File.
> |
> | Do you have any suggestions in how to remove or delete this file?
> |
> | Thanks,
>
> Do you have a file called
> C:\windows\SYSTEM32\mszx23.exe
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

David H. Lipman
07-09-2005, 10:48 PM
From: "Walt" <Walt@discussions.microsoft.com>

| Yes there was David, I am not currently at the infected system. I believe
| this file was either removed or quarntined.

Walt:

Removal of this infector is *very* involved. Please send me email as a I have a tool and a
set of instructions "specifically" for this nasty Trojan as it is not easily removed.

Just remove ~nospam~ to email me. I will need an email address that I can send you a
self-extracting ZIP file that contains the tool and a set of instructions on what needs to
be done.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Walt
07-09-2005, 10:48 PM
David, send it to wdaigle@ewri.biz and thanks greatly.

"David H. Lipman" wrote:

> From: "Walt" <Walt@discussions.microsoft.com>
>
> | Yes there was David, I am not currently at the infected system. I believe
> | this file was either removed or quarntined.
>
> Walt:
>
> Removal of this infector is *very* involved. Please send me email as a I have a tool and a
> set of instructions "specifically" for this nasty Trojan as it is not easily removed.
>
> Just remove ~nospam~ to email me. I will need an email address that I can send you a
> self-extracting ZIP file that contains the tool and a set of instructions on what needs to
> be done.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

David H. Lipman
07-09-2005, 10:48 PM
From: "Walt" <Walt@discussions.microsoft.com>

| David, send it to wdaigle@ewri.biz and thanks greatly.
|

OK but, I really didn't want you to post your email address in public w/o being munged.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman
07-09-2005, 10:48 PM
From: "Walt" <Walt@discussions.microsoft.com>

Did you get the stuff Walt ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman
07-09-2005, 10:48 PM
From: "Walt" <Walt@discussions.microsoft.com>

| I am attempting to help a client with the Haxdoor.d virus and using both
| Microsoft AntiSpyware and Symantec AntiVirus 2005 both with updated
| definitions, I was successfull in getting rid of all problems except one.
| That is the dll file named drct16.dll was not deleted due to a rights issue.
| Even with the Administrator rights I have been unable to rename, move, delete
| or anything with this Virus File.
|
| Do you have any suggestions in how to remove or delete this file?
|
| Thanks,

Walt:

I haven't heard from you and I received a "failed mail" message on an email I sent you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


Trojan Problem (vdmt16.sys)