Computing.Net > Forums > Security and Virus > Backdoor.NetDevil ~~ I NEED HELP!!!

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Backdoor.NetDevil ~~ I NEED HELP!!!

Reply to Message Icon

Original Message
Name: GymTwinz30
Date: January 15, 2003 at 02:42:48 Pacific
Subject: Backdoor.NetDevil ~~ I NEED HELP!!!
OS: Windows XP Home Edition
CPU/Ram: 1.79 Ghz 480 NP RAM
Comment:

Ok, this is my problem. I'm not sure if I have the virus or not. I was on AIM and someone sent me a pic (actually a virus). I opened it, and this popped up....

C:\DOCUME~1\Darren\LOCALS~1\Temp\neodrawing#2.exe
is infected with the Backdoor.NetDevil virus.
Unable to repair this file.

Then another thing popped up...

C:\DOCUME~1\Darren\LOCALS~1\Temp\neodrawing#2.exe
is infected with the Backdoor.NetDevil virus.
Access to the file was denied.

Do I have the virus? Please let me know. Thank you.


Report Offensive Message For Removal


Response Number 1
Name: murve
Date: January 15, 2003 at 06:24:09 Pacific
Reply: (edit)

hi jimtwinz30,
here's some info on net devil trojan also:
look for these files in your windows directory:
Backdoor.Devil, Trojan.Win32.Flood,
Ports: 65000 (port can not be changed)
Files: Devil13.zip - Devil13.exe - 95,232 bytes Taupe.zip - 1,759,973 bytes Mswinsck.ocx - 106,256 bytes Icqflood.exe - 24,576 bytes Opscript.exe - 61,952 bytes Socket.exe - 355,840 bytes Winamp34.exe - 690,688 bytes Wingenocid.exe - 67,584 bytes Winrar.exe - 687,616 bytes
Created: Sep 1998
Requires: Mswinsck.ocx - is required to run the trojan.
if found do a search in registry and delete the keys, then reboot, then go to your windows directory and or system directory and delete the files and reboot.
for more info on trojans go to www.thepublicworks.com security section and link to simovits consulting.
hope this helps,
murve



Report Offensive Follow Up For Removal

Response Number 2
Name: cactus
Date: January 15, 2003 at 08:11:46 Pacific
Reply: (edit)

An on-line scan here moght help :-

http://www.anti-trojan.net/at.asp?l=en&t=onlinecheck


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software