Cant get rid of virus..

[justjeff]

Virusscan 8.5, no patch

Everytime I login to my PC I get this error:


c:\windows\system32\drivers\dfnk.sys is infected with Generic Rootkit.b Trojan - File Successfully deleted.
winymgd32.dll is infected W32/Trats.dll Virus - File was successfully deleted

If its deleted each time ,why does it keep coming back!

Thanks.

[Jubo]

Moved your post to a more appropriate forum: Virus Discussions & Removal Assistance"


If these files ar still there, can you submit it to the following web sites for further analysis:

• 
  
• McAfee'sAvert Labs
  
• Microsoft Malware Protection Center
  
• VirusTotal

Let us know what it says...

[justjeff]

Its Xpnull SP2, latest updates.

I dont see how to submit it if its deleted each time!

happy

[melboy]

Are you experiencing any of the symptoms described in either of the detection information pages below, or indeed any other symptoms of malware infection.

Generic Rootkit.b
http://vil.nai.com/vil/content/v_138429.htm

W32/Trats
http://vil.nai.com/vil/content/v_143729.htm

[justjeff]

Nothing of any help in those files..any other ideas?

[melboy]

The post was for information , not a solution. Other than the detection and subsequent removal (or not, as the case may be) of the files, do you have symptoms of malware infection?

Rootkits hide files and processes associated with malware. It could be that you have other undetected malware that protects or re-creates malicious files and processes.

Your best option is to use Hijackthis and let one of the experts take a look on one of the forums in Ex Brits post here:

http://forums.mcafeehelp.com/showthread.php?t=214242

[justjeff]

Ill do that, thank you.