I've fixed the virus(apparently it wasnt technically a virus).
I used the "search newgroups" box in PCBUILD and looked for anything to do
with windll.dll. There were plenty of people who have encountered the same
problem.
Windll.dll is a file placed in Windows\system by the server portion of the
"Backorifice" trogan virus. It also installed a program called " .exe" and
another file simply called .vir.
Warning for those who encounter this on their system; backorifice opens
ports in your computer that allow those with the client portion of the
programme to inspect anything on your computer.
There is an excellent site on the net that discusses threats to your
internet security.....www.commodon.com/threat/....and tells you how to rid
yourself of the problem.
My son downloaded this file from a hacker somewhere.
Its really important, when trying to rid yourself of this trojan to remove
it from the registry. The internet site tells you how to do all that.
f Norton can't remove them for you then you will have to boot off a CLEAN
and protected floppy and then delete them. If you don't already have one
the best approach would be to create a boot disk off a clean machine and
then copy the command files that you will need from C:\windows\command to
the floppy. Use the protection TAB on the floppy.
You may have to use Attrib to remove any system or hidden attributes the
files might have before you can delete them. To learn about attrib bring up
a Dos window and type Attrib /?.
Scanning your CD will not suffice to find the files as they are no doubt in
cab files. You will need to search inside the CAB files to find them and
they might be missing the last letter ...like windll.dl_ and it will be
necessary to add the l. Try searching with a wild card.
m
The PCSOFT web site always needs good submissions. If
you would like to contribute to the website, send any
software tech tips or software reviews to:
[log in to unmask]
|