AstroFan Posted October 11, 2003 Share Posted October 11, 2003 In a Norton AntiVirus Pro Edition 2003 scan it said "The file C:\WINDOWS\dxdgns.dll is infected with the Backdoor.Beasty virus." I tried to delete it but it said access denied, and I went to http://securityresponse.symantec.com/avcen...oor.beasty.html and went through the instructions on how to delete the stuff through regedit and none of the stuff I was supposed to delete was even there. I scanned again and its still there and wont let me delete, repair, or quarantine. How do I get rid of this?I apologize if this is in the wrong forum, I wasnt completely sure which area to post it in. Link to comment Share on other sites More sharing options...
ggtyh Posted October 11, 2003 Share Posted October 11, 2003 To get access to a file, you could become the owner of the file, then you'll have total control over it.To gain ownership, Right-clik the files and chose Properties. Then click the Security tab, and the advanced settings button. A new windows pops up; chose the ownership tab. You'll have two choices: yourself and the administrators group.You'll probably be able to delete the file now, if it's not in use. Link to comment Share on other sites More sharing options...
AstroFan Posted October 11, 2003 Author Share Posted October 11, 2003 I clicked properties but didnt see a security tab. I clicked "Advanced" and a window called Advanced Attributes popped up but there was nothing in there to change ownership, just stuff about whether I wanted to index the file for fast searching. Any idea's? Link to comment Share on other sites More sharing options...
ggtyh Posted October 11, 2003 Share Posted October 11, 2003 If there's no Security tab, it means that your drive is formatted in FAT32...Then, I have no idea... sorry... Link to comment Share on other sites More sharing options...
DaveXP Posted October 11, 2003 Share Posted October 11, 2003 turn off NAV and disbale it completely go to the file delete in manual empty the recycle bin and restrat the machine and re-enable NAV. Link to comment Share on other sites More sharing options...
KonuS Posted October 12, 2003 Share Posted October 12, 2003 I thing you must kill the process of this file or service, and then delete it. The process maybe hidden in process explorer. Link to comment Share on other sites More sharing options...
AstroFan Posted October 12, 2003 Author Share Posted October 12, 2003 I thing you must kill the process of this file or service, and then delete it. The process maybe hidden in process explorer.How do I figure out what process it is?And disabling NAV didnt work, it still wouldnt let me manually delete dxdgns.dll. Link to comment Share on other sites More sharing options...
DaveXP Posted October 12, 2003 Share Posted October 12, 2003 thats because the file is in use shutdown all process you dont thinkm should be there. Link to comment Share on other sites More sharing options...
Aaron Posted October 12, 2003 Share Posted October 12, 2003 Try this:Start > Run >regsvr32 /u c:\path\to\dxdgns.dllModify C:\path\to\ to point to the location of dxdgns.dllThen try to delete the file. Link to comment Share on other sites More sharing options...
AstroFan Posted October 12, 2003 Author Share Posted October 12, 2003 Try this:Start > Run >regsvr32 /u c:\path\to\dxdgns.dllModify C:\path\to\ to point to the location of dxdgns.dllThen try to delete the file.It said "failed- access is denied".If I end a process that I want running, it will start again after I reboot right? So if needed I could end all the processes and then delete the virus? Link to comment Share on other sites More sharing options...
grandam_99 Posted October 12, 2003 Share Posted October 12, 2003 start the system in safe mode and then delete the file Link to comment Share on other sites More sharing options...
AstroFan Posted October 12, 2003 Author Share Posted October 12, 2003 I cant open any processes now for some reason. It keeps giving me errors everytime i try to do anything. Link to comment Share on other sites More sharing options...
AstroFan Posted October 12, 2003 Author Share Posted October 12, 2003 Well, I restored to last week and everything seems fine with the processes now although the virus is still there. "Modifies the default value of the following registry key:HKEY_CLASSES_ROOT\exefile\shell\open\commandThis causes the Trojan to execute every time a .exe file is executed."Im not great with computers, so will safe mode make it so no .exe files open? If not, how will I remove it? The things Im supposed to remove to make it stop from automatically opening arent even there yet it still says I have a virus. Link to comment Share on other sites More sharing options...
MSNwar Posted October 13, 2003 Share Posted October 13, 2003 When a file is in use and cannot be deleted I use a program called zap.exe to delte the file(s). Download zap.exe from here:http://helpdesk.kixtart.org/KixUtilsTasks.aspYou will need to open an MS-DOS Session and run zap.exe from the command prompt. Very easy. Start > All Programs > Accessories > Command Prompt.The DOS Window will look similar to the picture below. Use the same commands I used and the file will be deleted. Your directories will of course be different, so substitute accordingly. BE CAREFUL WITH WHAT YOU DELETE!Hope this helps Link to comment Share on other sites More sharing options...
AstroFan Posted October 13, 2003 Author Share Posted October 13, 2003 I downloaded "The Cleaner", as suggested by a friend, to try to get rid of the trojan but it automatically closed while scanning. He suggested I get off IE, but when I did a bunch of screens starting popping up and going to random sites. I went into safe mode and tried to delete the infected file, but it still said access denied. I then started back in normal mode and it seems to be fine for now, but I really have no idea what to do. Last time I used The Cleaner my computer started going crazy. Is this trojan something serious that I should be losing sleep over and worrying about? I'll try using that last program that was suggested, but I really don't want IE going crazy again.Also, when I start my computer, a runtime error(with the IE icon next to "Error") pops up saying something like Runtime Error 5 at 003C729C. Im always connected to IE because everytime i try to close it, a bunch more popup. Im not sure if thats related or not, so I thought I would see if anybody else knows. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now