Print Page - Nasty iosdt.exe

Title: Nasty iosdt.exe
Post by: enema on 11 December, 2004, 09:36:04

Hi!

Could anyone give me advice how to remove trojan iosdt from my PC? I tried safe mode, command promt and antiviruses but nothing helps... thing is that when I write directorys address in explorer (like this - C:\windows\system32\iosdt) he shows me some dat files but there is no iosdt.exe in it... when i press up one folder button, it doesn even show me iosdt dir., so its imposible to delete it :(

when I use command promt (del C:\windows\system32\iosdt) it shows me, that dir doesnt exist

Title:
Post by: blackwings on 11 December, 2004, 11:29:59

are you sure that there is no wierd signs in the folder's name that you are trying to remove, like a dollar sign ($) ?

If it's really a virus or a trojan, it might have made so that your system to believes that the folder is a system folder or that files in that folder are system files.

If no other people know how to solve this, worse case scenerio is that you somehow have to safely transfer all important data and make a backup, then format the system and install it again.

EDIT: do have have a anti-virus made by one of the leading companies and is it really the latest update on the virus definition(I know you said you have tested with a anti-virus program, just want to ask you anyway)? Do you also use anti spyware program like ad-aware or Spybot S&D? If you don't, I recommend you to check it out.

Title:
Post by: enema on 11 December, 2004, 11:48:33

Thing is, that I cant even see that folder (although i have my hiden files set to visible) so I cant chek, if it has $ or not... I only can see this iosdt.exe trough Windows task manager's procces viewer and see its exact location using norton procces viewer

Title:
Post by: blackwings on 11 December, 2004, 12:53:24

QuoteOriginally posted by enema
Thing is, that I cant even see that folder (although i have my hiden files set to visible) so I cant chek, if it has $ or not... I only can see this iosdt.exe trough Windows task manager's procces viewer and see its exact location using norton procces viewer

well, there are 2 options for seeing hidden files, 1 for normal/generall files and another one for System files. Are you sure that you have made so that you can se all system files to?

Title:
Post by: enema on 11 December, 2004, 14:03:15

hey, youre right! Fixed it now! Thank you!

Title:
Post by: n1ck on 11 December, 2004, 14:03:25

also you may not be able to delete it if it is running as a process, check you processes and see if its running!

Title:
Post by: blackwings on 11 December, 2004, 14:30:11

QuoteOriginally posted by enema
hey, youre right! Fixed it now! Thank you!

n1ck, he seems to have fixed it ;)

and enema, np, I'm glad I could help you :)

Title:
Post by: enema on 11 December, 2004, 14:32:12

do you really think I would let somekind of freakin viruss to run on my PC??? Never! Its deleted already!

Title:
Post by: blackwings on 11 December, 2004, 14:45:29

QuoteOriginally posted by enema
do you really think I would let somekind of freakin viruss to run on my PC??? Never! Its deleted already!

just to be sure, check your computer tomorrow to, sometimes viruses has a nasty habit of coming back >_<

Title:
Post by: enema on 11 December, 2004, 15:42:32

of course

Title:
Post by: enema on 13 December, 2004, 16:35:48

Its gone for two days now... thank you guys!

PtokaX forum

Stuff => Offtopic => Topic started by: enema on 11 December, 2004, 09:36:04