Virus

  • Thread starter Thread starter Marc
  • Start date Start date
M

Marc

I am running W2K and have an infected file and my antivirus can not fix it
or delete it can you tell me if it is a w2k system or important to it or can
i delete it my self or is there a way of installing the file fresh then
deleting the old one

C:\winnt\system32\mstask32.exe
Itis infected with
Trojan horse IRC/ backdoor.sdbot.ais


thanks heaps
marc
 
This may help. mstask32.exe is not an operating system file.
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect.


:
| I am running W2K and have an infected file and my antivirus can not fix it
| or delete it can you tell me if it is a w2k system or important to it or
can
| i delete it my self or is there a way of installing the file fresh then
| deleting the old one
|
| C:\winnt\system32\mstask32.exe
| Itis infected with
| Trojan horse IRC/ backdoor.sdbot.ais
|
|
| thanks heaps
| marc
|
|
 
Marc said:
I am running W2K and have an infected file and my antivirus can not fix it
or delete it can you tell me if it is a w2k system or important to it or can
i delete it my self or is there a way of installing the file fresh then
deleting the old one
Click to expand...
C:\winnt\system32\mstask32.exe
Itis infected with
Trojan horse IRC/ backdoor.sdbot.ais
Click to expand...

There's no file by that name on my system, I suspect that it's part of
the virus. Try renaming it first. If you can do that, reboot your system
and run it for a while to be sure that there are no ill effects. If there
are none, you can delete the file.
 
Thanks Dave
I am eally nervous about deleting things in reg if I make a back upof the
reg and I make a mistake will the back up take over and all will be back to
what it was before I deleted things bcause when I looked in the reg there
were a few things that are listed on the link you gave me example
"svchost.exe"

thanks
marc
 
You can backup your reg and create the ERD by going to;
Programs|Accessories|System Tools|Backup, then choose ERD, then if you check
the box for "Also backup....", then the reg will also be backed up to
%windir%\repair\RegBack
leaving the
%windir%\repair\
directory files intact as original installation.

You can also export the subkey in question to a *.reg file before editing
then if needed double-click the *.reg file to merge it back into the
registry. This doesn't work for the entire registry though.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect.


:
| Thanks Dave
| I am eally nervous about deleting things in reg if I make a back upof
the
| reg and I make a mistake will the back up take over and all will be back
to
| what it was before I deleted things bcause when I looked in the reg there
| were a few things that are listed on the link you gave me example
| "svchost.exe"
|
| thanks
| marc
 
Back
Top