Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Norton detected the backdoor.coreflood virus on my computer, which I understand is actually a trojan horse. However, Norton cannot quarantine or delete the file. I have been to Symantec's site and followed the instructions, but the infected file cannot be deleted because it is being used by another program. If I go into task manager and attempt to kill the explorer.exe process, everything on my screen disappears. Please someone help, it is making my computer run extremely slow. Thanks
Thanks a lot, I'll try them. Does it matter if i run it on my already infected PC, or do I need to download it on a clean disk, and then run it on my computer?
0 
Or-run the symantec process in the safe mode.
please post back with the fix that worked so we may help others. Thanks.
0
I ran symantec in safe-mode. It was still unable to delete or quarantine the infected file (Windows/System32/kbdpwrj.dll) It said it could not access the file. It won't let me manually delete it either.
0
If you need to del a file google to MoveOnBoot and run it. It will kill the critter on the next boot.
please post back with the fix that worked so we may help others. Thanks.
0
Joe:The scanning services I linked will scan your PC from their site; no download required. They're designed to look for infected computers.
Solarian
0
Thanks a million Solarion, when i get off work I'm gonna play around w/it. Hope ya'll are on tonite, cause if it doesn't work Lord knows I'll be here. I feel like life isn't quite going right if there's something messing up my computer. I just feel unsafe... :)
0
Just removed this off a PC.
Disable system restore before you scan. (system properties in control panel) Otherwise, windows thinks it's a protected system file and restores it. Then dump your temporary internet files via internet options in control panel, including offline content.
Once you clean it off that way, start up BOTH IE and Windows Media Player and close them, scan again to make sure it's actually gone.
Don't forget to turn system restore back on when you're sure you took care of that trash. ;-)
0
Symantec (Norton) posted a revised solution to this problem on 08 July.
I used it successfully this morning (10 July) to get rid of backdoor.coreflood from my machine, so I know it works.
HTH
0
Joe
This is how I just removed it off a pc
According to pandascan it was Afcore.e
According to Kasperky it was Afcore.ajClick start> run> copy/paste the bold text in the run box:
rundll32 c:\windows\system32\kbdpwrj.dll, Uninstall
Hit enter
Answer yes at the prompt to remove AF from system.
Reboot when complete.
Rescan at virus sites suggested above to see if infection is actually gone...should see immediate difference in speed etc.
If dll is still present and not removable...another utility to help remove that dll file is Killbox:
http://download.broadbandmedic.com/
Download The KillBox
Unzip to desktop
Start killbox
Paste the bold text in the "file to kill" field:c:\windows\system32\kbdpwrj.dll
Don't hit kill file...instead hit "action" then "delete on reboot"
Reboot....reboot will likely take a long time...normal after removing such an infection. It should tell you file sucessfully deleted.
**Warning** Killbox is extremely powerful tool...very handy to have BUT will kill ANYTHING you tell it to...Including system critical files!!!
I never give up!
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
