3800 Virus Help!!!!!!!!

xplicitt

Regular
Nov 11, 2008
336
0
I got a virus called backdoor.coreflood that norton left alone. It installed a .dll file (msvcdt.dll) that seems to have embedded itself in memory or something and I cannot delete it or rename it at all cause it is in use at all times. I did some searching and this is indeed a bogus file and I cannot get rid of it to save my life and the virus notifications are getting a little irritating!!!! :angry: Any help would greatly be appreciated. Thanks in advance!!!
 

Aircal

TCG Elite Member
TCG Premium
Nov 10, 2008
7,107
7,805
Countryside
Real Name
Tom callahan
Cool I was going to start a thread with this same kind of question. Norton is calling mine a trojin horse. The file is windows/httpfilter.ddl It says it can't repair the file and I can't delete it either. Please help!!!!!
I'm running windows me and have current up to date nortons loaded.
 

alexgtp

TCG Elite Member
Aug 3, 2007
2,272
0
Which operating system are you using?

NOrton antivirus will quarantine this virus! If it cant remove it.

If you are usind windows XP do the following.

1.Disable System Restore (Windows Me/XP).
2.Update the virus definitions.
3.Restart the computer in Safe mode or VGA mode.
4.Run a full system scan and delete all the files detected as Backdoor.Coreflood.
5.Delete the value that was added to the registry.

It should be in the following regisrty setting.

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run


ONLY REMOVE THIS IF YOU ARE OK WITH WORKING IN THE REGISTRY


1.Click Start, and then click Run. (The Run dialog box appears.)
2.Type regedit, and then click OK. (The Registry Editor opens.)
3.Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


4.In the right pane, delete the value that refers to the filename detected as Backdoor.Coreflood.

Exit the Registry Editor.




If you don not know how to turn off XP restore here is Symantecs how to.
http://service1.symantec.com/SUPPORT/tsgen...001111912274039
 

xplicitt

Regular
Nov 11, 2008
336
0
Originally posted by alexgtp@Jul 8 2004, 10:36 AM
Which operating system are you using?

NOrton antivirus will quarantine this virus! If it cant remove it.

If you are usind windows XP do the following.

1.Disable System Restore (Windows Me/XP).
2.Update the virus definitions.
3.Restart the computer in Safe mode or VGA mode.
4.Run a full system scan and delete all the files detected as Backdoor.Coreflood.
5.Delete the value that was added to the registry.

It should be in the following regisrty setting.

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run


ONLY REMOVE THIS IF YOU ARE OK WITH WORKING IN THE REGISTRY


1.Click Start, and then click Run. (The Run dialog box appears.)
2.Type regedit, and then click OK. (The Registry Editor opens.)
3.Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


4.In the right pane, delete the value that refers to the filename detected as Backdoor.Coreflood.

Exit the Registry Editor.




If you don not know how to turn off XP restore here is Symantecs how to.
http://service1.symantec.com/SUPPORT/tsgen...001111912274039
I've tried all of that stuff from the symantec site already with no luck :angry: :angry: The .dll file is in constant use and cannot be altered, modified, renamed, deleted, etc...

Seems i'm going to have to pull out the HD and plug into another pc where it is not being used and then delete the file..

I've tried deleting the reg entry already and that did not take care of it!!!

Thanks for trying though!!!
 

alexgtp

TCG Elite Member
Aug 3, 2007
2,272
0
Wow even starting it in safe mode?

USe hijack this.

When you see the enrty wwith that particular entry remove it.
By editing the registry is should remove it.
Can you stop the process in task manager?
If you cant tru chaging the proirity to minimal than stop process. than go to the folder where the .dll is located and delete.

Than edit the registry setting

If that dont work than I have no clue.
 
Old Thread: Hello . There have been no replies in this thread for 90 days.
Content in this thread may no longer be relevant. Consider starting a new thread to get fresh replies.

Thread Info

  • X
    Created
  • 4
    Replies
  • 304
    Views
  • Participants list