Virus In C:\windows, Wont Let Me Fix

[AstroFan]

In a Norton AntiVirus Pro Edition 2003 scan it said "The file C:\WINDOWS\dxdgns.dll is infected with the Backdoor.Beasty virus." I tried to delete it but it said access denied, and I went to http://securityresponse.symantec.com/avcen...oor.beasty.html and went through the instructions on how to delete the stuff through regedit and none of the stuff I was supposed to delete was even there. I scanned again and its still there and wont let me delete, repair, or quarantine. How do I get rid of this?

I apologize if this is in the wrong forum, I wasnt completely sure which area to post it in.

[ggtyh]

To get access to a file, you could become the owner of the file, then you'll have total control over it.

To gain ownership, Right-clik the files and chose Properties. Then click the Security tab, and the advanced settings button. A new windows pops up; chose the ownership tab. You'll have two choices: yourself and the administrators group.

You'll probably be able to delete the file now, if it's not in use.

[AstroFan]

I clicked properties but didnt see a security tab. I clicked "Advanced" and a window called Advanced Attributes popped up but there was nothing in there to change ownership, just stuff about whether I wanted to index the file for fast searching. Any idea's?

[ggtyh]

If there's no Security tab, it means that your drive is formatted in FAT32...

Then, I have no idea... sorry...

[DaveXP]

turn off NAV and disbale it completely go to the file delete in manual empty the recycle bin and restrat the machine and re-enable NAV.

[KonuS]

I thing you must kill the process of this file or service, and then delete it. The process maybe hidden in process explorer.

[AstroFan]

I thing you must kill the process of this file or service, and then delete it. The process maybe hidden in process explorer.

How do I figure out what process it is?

And disabling NAV didnt work, it still wouldnt let me manually delete dxdgns.dll.

[DaveXP]

thats because the file is in use shutdown all process you dont thinkm should be there.

[Aaron]

Try this:

Start > Run >

regsvr32 /u c:\path\to\dxdgns.dll

Modify C:\path\to\ to point to the location of dxdgns.dll

Then try to delete the file.

[AstroFan]

Try this:

Start > Run >

regsvr32 /u c:\path\to\dxdgns.dll

Modify C:\path\to\ to point to the location of dxdgns.dll

Then try to delete the file.

It said "failed- access is denied".

If I end a process that I want running, it will start again after I reboot right? So if needed I could end all the processes and then delete the virus?

[grandam_99]

start the system in safe mode and then delete the file

[AstroFan]

I cant open any processes now for some reason. It keeps giving me errors everytime i try to do anything.

[AstroFan]

Well, I restored to last week and everything seems fine with the processes now although the virus is still there.

"Modifies the default value of the following registry key:

HKEY_CLASSES_ROOT\exefile\shell\open\command

This causes the Trojan to execute every time a .exe file is executed."

Im not great with computers, so will safe mode make it so no .exe files open? If not, how will I remove it? The things Im supposed to remove to make it stop from automatically opening arent even there yet it still says I have a virus.

[MSNwar]

When a file is in use and cannot be deleted I use a program called zap.exe to delte the file(s). Download zap.exe from here:

http://helpdesk.kixtart.org/KixUtilsTasks.asp

You will need to open an MS-DOS Session and run zap.exe from the command prompt. Very easy. Start > All Programs > Accessories > Command Prompt.

The DOS Window will look similar to the picture below. Use the same commands I used and the file will be deleted. Your directories will of course be different, so substitute accordingly. BE CAREFUL WITH WHAT YOU DELETE!

Hope this helps

[AstroFan]

I downloaded "The Cleaner", as suggested by a friend, to try to get rid of the trojan but it automatically closed while scanning. He suggested I get off IE, but when I did a bunch of screens starting popping up and going to random sites. I went into safe mode and tried to delete the infected file, but it still said access denied. I then started back in normal mode and it seems to be fine for now, but I really have no idea what to do. Last time I used The Cleaner my computer started going crazy. Is this trojan something serious that I should be losing sleep over and worrying about? I'll try using that last program that was suggested, but I really don't want IE going crazy again.

Also, when I start my computer, a runtime error(with the IE icon next to "Error") pops up saying something like Runtime Error 5 at 003C729C. Im always connected to IE because everytime i try to close it, a bunch more popup. Im not sure if thats related or not, so I thought I would see if anybody else knows.