On Feb 8, 12:43*pm, "K." wrote:
On 08/02/2010 17:10, Rich Barry wrote:

Have you seen this MS Article
* * * * * * *http://support.microsoft.com/kb/903251

*wrote in message
. com...
The event log provides a link to the microsoft website and sends error
information. One of the options there was the Haxdoor virus but I've
searched for some of the files associated with it, with search hidden
files selected, but didn't find any, and there is nothing unexpected in
the registry area of winlogin/notify.

Yes thanks I found that page or one very similar to it.

With search for hidden files on, I didn't find either vdmt16.sys or
vdnt32.sys anywhere on my system, neither did I find any reference to
draw32 or drct16 in the registry, both via a find search in the whole
registry and a manual examination of the registry keys under:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Notify\

Is it possible to have this virus without the above files. I'll try and
check through that long list tomorrow to see if I find any evidence of
any of them.

Thanks for your response.

K.

I suggest expanding your malicious software scanning horizons.

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpywa (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

If the scans run clean and the issue happens again, diagnose and
resolve it with certainty by examining the crash dump file after your
next failure.