Need help with backdoor.prorat

Need help with backdoor.prorat

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Need help with backdoor.prorat =?Utf-8?B?cm9tYW50aWNfc291bF9h 10-20-2005
Posted by =?Utf-8?B?cm9tYW50aWNfc291bF9h on October 20, 2005, 6:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I have two system files infected with this virus the files are : winkey.dll -
reginv.dll
I tried to delete them but I failed even in safe mode norton antivirus
stopped functioning and system restore too and windows firewall is turned off
once i restart the computer I have Windows XP Home Edition SP2 so any one can
help me by a removal tool or a way to delete this files I will be gratefull
Thanks alot for your valuable time.

Posted by David H. Lipman on October 20, 2005, 6:40 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| I have two system files infected with this virus the files are : winkey.dll -
| reginv.dll
| I tried to delete them but I failed even in safe mode norton antivirus
| stopped functioning and system restore too and windows firewall is turned off
| once i restart the computer I have Windows XP Home Edition SP2 so any one can
| help me by a removal tool or a way to delete this files I will be gratefull
| Thanks alot for your valuable time.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one
Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE.
It will
simplify the process of using; Sophos, Trend, Kasperski and McAfee Anti Virus
Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Ian Kenefick on October 20, 2005, 6:42 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Thu, 20 Oct 2005 03:13:03 -0700, "romantic_soul_alone"

>I have two system files infected with this virus the files are : winkey.dll -
>reginv.dll
>I tried to delete them but I failed even in safe mode norton antivirus
>stopped functioning and system restore too and windows firewall is turned off
>once i restart the computer I have Windows XP Home Edition SP2 so any one can
>help me by a removal tool or a way to delete this files I will be gratefull
>Thanks alot for your valuable time.

Multi AV using the Kaspersky Engine should detect and remove this. You
can get this from www.ik-cs.com/got-a-virus.htm

Let us know how much success you have :)
--
Ian Kenefick
[1]http://www.ik-cs.com
[2]http://www.windowsdefender.com
[3]http://www.claymania.com/nav-map.html

Similar ThreadsPosted
W32/Backdoor.KPI May 25, 2006, 7:22 pm
Backdoor.HackDefender July 14, 2005, 10:56 pm
backdoor.trojan April 25, 2006, 1:43 pm
Anybody got a fix for BackDoor.Generic3.LRT? October 27, 2006, 11:44 pm
w32\backdoor.aaol January 27, 2007, 11:21 am
Backdoor.Delf.aki February 22, 2007, 1:27 am
Backdoor Trojan? March 2, 2007, 11:12 am
irc backdoor trojan May 9, 2008, 8:28 am
i can't remove BACKDOOR.SDBOT HELP! July 5, 2005, 9:12 am
backdoor:win/sdboot!569c January 7, 2006, 2:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy