Generic BackDoor Trojan

[sheep]

The file

C:\WINDOWS\system32\perfc000.dat is infected by the GEneric BackDoor trojan and cannot be deleted.

 

Help! Kenna this dumb trojan and my anti virus keep picking it up.

Delete and quarantining the trojan is not possible. It seems that it keep replicating itself.

went into the system32 folder and hit delete but it keeps popping back up.

 

Anyway to get rid of it permanently?

[redbeacon]

Try this app as your first troubleshooting step:

 

Remove on Reboot

 

Once installed, right click that perfc000.dat file and on the "right-click menu" that appears select "Remove on Reboot"

 

Restart your comp. See whether the stubborn file is still in that system folder.

 

[sheep]

finally removed it..

Thanks for ur input.

Fought with it for the good portion of this morning..

Dumb trojan. damn persistent.

[Gh0st _R11der]

Try this app as your first troubleshooting step:

 

Remove on Reboot

 

Once installed, right click that perfc000.dat file and on the "right-click menu" that appears select "Remove on Reboot"

 

Restart your comp. See whether the stubborn file is still in that system folder.

 

Hi there, i too got 2 viruses kepp picking up by my anti-virus. 1 is Hacktool.Rootkit (C:/wind/sys32/dr/majow), the other 1 is Downloader.Trojan (C:/win/sys32/gadsv.dll). Can i oso use the above mentioned method ? Will del them affect my sys running bcos i really don noe wats the dr & dll mentioned use for. Thkz

[redbeacon]

Hi there, i too got 2 viruses kepp picking up by my anti-virus. 1 is Hacktool.Rootkit (C:/wind/sys32/dr/majow), the other 1 is Downloader.Trojan (C:/win/sys32/gadsv.dll). Can i oso use the above mentioned method ? Will del them affect my sys running bcos i really don noe wats the dr & dll mentioned use for. Thkz

 

Hi there

 

If your antivirus actually reported that it saw those 2 viruses, then it did a good job of doing so, as expected.

 

So, once your antivirus told you that it found those 2 viruses, did you remember seeing (and clicking) any button labeled "Quarantine" or "Delete"? Because if you clicked on either button, it actually would have automatically helped you trash those 2 viruses, hands-free.

 

Do a full system antivirus scan to "disinfect" your computer. Quarantine or delete any viruses that the antivirus program picks up. Most users do succeed in eradicating the virus this way -- and they never come back.

 

====

 

P.S.: Remove on Reboot, as noted by me before -- is only used when even the toughest of all Antivirus programs can't delete a stubborn file that gives a "this file is locked" message. I'd recommend using that as the last step in troubleshooting virus problems.

[Gh0st _R11der]

Hi redbeacon, i dont remember any button "quarantine" or "delete" but certainly "repaired" bcos these 2 files r repaired but access denied accordingly to my anti-virus due to being infected.

 

I had tried using ur mentioned method but cannot rid these 2 nuisance, try manually del them, a popup dialogue box will appear and indicated otr person or programe is using it and got to close the programe and try del them again.

 

Update virus definitions and run a full scan oways show 0 infections n yet these 2 buggers keep poping up. they may b backup files created by my sys restore. Any ot ways to remove them permanently? Thkz

[Gh0st _R11der]

Notr ting, Whenever i click or rite click on these 2 files ( majow sys dr n gadsv.dll) trying to del them, my anti-virus will pop up the 2 viruses (hacktool.Rootkit n Downloader.Trojan) pertaining to these 2 files. Any1 out there kenna the same viruses as mine b4 and how to rid them? Thkz.

[redbeacon]

A rootkit, ".sys", and a ".dll" file eh?

Hmm...tough nut to crack here.

 

Try the Remove on Reboot program. See whether those files come back after you restart your computer.

 

If not, you need to grab an "anti-rootkit" scanner. I've got one here. As far as I'm concerned, rootkits are pesky and smart lil viruses that can hide themselves from anti-virus programs.

 

Hope this would solve your problem bro

[Gh0st _R11der]

Thkz redbeacon.... Really hard nutz to crack. Juz found out quite cheem to del them. Being following inst from notr techforum. Had 2 keep my fingers x.