[bscully]

Hi and thanks for taking the time to read this post.

I have a Windows 2003 server patched to the hilt and with the latest McAfee DAT and it still somehow managed to get infected with WinNT/Hackdef.AW. I cannot seem to be able to remove this. I've tried:

-Microsoft's malicious software removal tool - identified WinNT/Hackdef.AW, said it was remove, but reappeared after reboot.
-NAI's Enterprise VirusScan with latest DAT didn't detect.
-NAI's Stinger didn't detect.
-AdAware didn't detect.
-Tried a couple of other's, but didn't detect.

Symptom:

After reboot, shortly after login, blank windows popup, system will be shutdown window appears with countdown (shutdown -a = workaround), left alone would result in reboot.

Thanks for any assistance you can offer.

Bill

[Advertisements]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.

[gerryf]

Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.