Re: Need help removing Backdoor.ProRat virus

boot from the xp cd and select recovery console
after logging in, delete the file

"Sharon F" <sharonfDEL@xxxxxxxxxxx> wrote in message
news:%23hP6B0DbFHA.2876@xxxxxxxxxxxxxxxxxxxxxxx
> On Thu, 02 Jun 2005 20:01:32 GMT, Mitch@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> wrote:
>
>> I'm running XP, and a file reginv.dll is infected with the ProRat
>> virus.
>>
>> I follwed these instructions,
>> (http://securityresponse.symantec.com/avcenter/venc/data/backdoor.prorat.html)
>>
>> but none of the registry keys mentioned exist on my system.
>>
>> My Norton Antivirus has been rendered inactive, my Firewall is turned
>> off, and won't let me turn it back on.
>>
>> I've read about this nasty thing...any help removing it is
>> appreciated.
>
> Have you considered getting on the phone with Symantec? You may have a
> newer variant that they need to more about. Sending them a sample of the
> infected file would be a good idea too. I don't use Norton's A/V anymore
> but seem to remember a link right in the program to "send sample." If you
> can't find it, there will be links on their website - probably in the SARC
> sections. While you have their ear, they would be able to give you a
> one-on-one walk-through for cleaning the system.
>
> MS also has a service to help with virus and other malware problems. Info
> is in left column : http://support.microsoft.com/?pr=SecurityHome
>
> --
> Sharon F
> MS-MVP ~ Windows Shell/User


.

Relevant Pages

  • RE: mydoom
    ... While still in safe mode, delete the infected file manually. ... For more information on the email-based virus W32/Mydoom@MM, ... improve the security in Outlook and other Office programs. ... but it can be obtained by installing the Outlook E-mail ...
    (microsoft.public.security.virus)
  • Re: INfected files in VSS
    ... What happened is that the virus wasn't scanned or captured via the hard ... Gavin ... >> If an infected file ends up in System Restore under Windows XP, ... >> Gavin [SBS Consultant] ...
    (microsoft.public.windows.server.sbs)
  • Re: win32.oneraw.AS
    ... | that the infected file is in a zip file. ... | another virus scan. ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ...
    (alt.comp.anti-virus)
  • Re: confused here
    ... >> i got a virus on my PC last year on Azearus BT and wiped my HD and lost ... > well, there are torrent sites, and there are torrent sites. ... certain what infected file did it, or that it was something that was ... *Anyone else remember those stupid emails that used to be forwarded ...
    (rec.music.gdead)
  • Warning: A possible virus has been detected in one of your messages.
    ... A virus or an infected file has been detected in a message: ... If you do not want the antivirus scanning for your emails, ... Please update your virus detection software and clean ...
    (freebsd-isp)