Backdoor.Hexdoor.d Virus Despite NAV. HELP!!! 3

[eman6]

This is really urgent.
My wife's laptop is hit by the Backdoor.Hexdoor.D Trojan Horse.
Neither Norton anti virus nor spybot could not eliminate it.
The registry values stated at Symantecs, to be removed where not found.
crt16.dll is detected as infected and cannot be deleted or accessed at all.

Is there still something I can do?
I do not have a floppy drive to boot with dos or something.

Help is really needed urgently.

Many thanks

_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[LloydSev]

well 2 things to keep in mind..

1) Spybots is not a virus scanner, and therefore can not remove viruses.

2) Always run virus scans in safe mode after you have realized you are infected.

If Symantec won't remove it, then use one of the 3 big online scanners to do it for you.

http://housecall.trendmicro.com/

http://www.pandasoftware.com/

http://www.ravantivirus.com/

Computer/Network Technician
CCNA

 

[aquias]

I"m betting the system can boot, if so try going to trend micro's housecall and run that program...

housecall.trendmicro.com

 

[eman6]

Thank you both.
I have managed to delete the registry entries regarding the drct16.dll
Now I am running NAV again.
If it still detects the virus and cannot kill it, I will resort to housecall.trendmicro.com as you both recommended, (which is useful to knnow anyway, b t w).

I'll let you know of the results.

Many thanks indeed.


_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[eman6]

Well, it still did not work with Norton anti virus.
However, the others you are suggesting are not free either.

hmmm, I guess I have no choice, but I would still like to be sure it will kill this virus and not make me pay for nothing.

Hmmm, let me see if this is possible.

_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[pechenegs]

Run an online antivirus check from

http://www.kaspersky.com/beta?product=161744315

you will need to input a name
and email adress but anyone will do & then acccept an active X control IT IS
SAFE to do so LET IT FIX WHATEVER IT FINDS

reboot again post a fresh HJT log

 

[LloydSev]

http://housecall.trendmicro.com/

is a FREE online virus scanner.

If you saw something not free, then you were trying to download or purchase their antivirus, and all you want to do is an online scan.

http://housecall.trendmicro.com/

http://www.pandasoftware.com/

http://www.ravantivirus.com/

Do ONLINE scans.

Computer/Network Technician
CCNA

 

[eman6]

Thank you pechenegs and LlioydSev again.
I have externalized the hard disk and connected it to my laptop and am now scanning it with Norton Antii Virus.
NAV has already detected and deleted the drct16.dll
Of course, now it is external and not used by Windows
I think this should work.
I'll let you all know of the result.

Thank you again all of you.


_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com

 

[eman6]

Looks like it worked.
It might not always be possible to externalize the hard disk and scan it, but whenever possible, I think it's a good idea.

_______________________________________

Eman_2005
Technical Communicator

http://www.smartistek.com