Hosting Provided By

Re: Backdoor.IRC.Flood.E & Backdoor.Dvldr

From: Salvatore Poliandro <jello(at)vanished.net>
Date: Wed Jun 04 2003 - 17:48:29 EDT

Original Message ----- From: "Curt Snow" <csnow@westerlyhospital.org> ... ... ...
>The Backdoor.Dvldr Trojan evades even being seen on the machine in the file
system or in the registry, yet >Norton continues to detect it. ... Variants of this Trojan installs a windows Root-Kit. It modifies system files and such so the file is mostly undetectable. ... ...
>My biggest question at this point is "where do these Trojans get in... what
is the method of infection? And of >course how can I eradicate these things without resorting to a complete format and rebuild? Backdoor.Dvldr Also acts as a gateway for other trojans. I battled with similar problems for about two weeks until i figured out how to get rid of it. Use the Norton anti-virus CD to boot your machine, It will run a scan of your system. Depending on what is infected it will be diccicult to erase. Sometimes it infects not only the System files but the System Cache Files (under Windows XP and such) which makes it a real pain. If you clean the system you may end up with a non-booting machine. Your best bet, after such a clean, would be to Reinstall the OS, grab the user data and reimage or reinstall. Best of luck with this nasty pair. Sal

Received on Wed Jun 4 19:05:05 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:39 EDT