Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Soxpeca & Co.

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Soxpeca & Co.

Unread postby datanet » November 13th, 2008, 7:13 pm

Hello team.

I am in the unfortunate position to have to remove soxpeca and everything that comes with it, because the infected machine is a Windows 2000 domain controller and cannot be "quickly formatted". I have found a post that started promising, but then was closed. Please - could anyone guide me through this?

Thanks.

This is what I have tried so far. I am sure you cann see what it means... I was able to kill al processes, and manually remove the services from the registry, but after a reboot they were all back plus c:\winnt\system32\udxfytw.exe appeared... After I killed all processes I wanted to delete the files, but allthough I am domain admin, windows tells me I am not allowed to delete them. Taking ownership and altering the access rights didn't help... I couldn' identify the process, that reinstalls all of them again...


kill -f 3356
del c:\winnt\system32\soxpeca.exe

del c:\winnt\system32\afisicx.exe

kill -f 1800
del c:\winnt\system32\mabidwe.exe

del c:\winnt\system32\noytcyr.exe

del c:\winnt\system32\roytctm.exe

del c:\winnt\system32\tdydowkc.exe

del c:\winnt\system32\wsldoekd.exe

del c:\winnt\system32\udxfytw.exe


ren c:\winnt\system32\mscfco.exe *.exi
datanet
Active Member
 
Posts: 3
Joined: November 13th, 2008, 6:58 pm
Advertisement
Register to Remove

Re: Soxpeca & Co.

Unread postby silver » November 17th, 2008, 10:31 pm

the infected machine is a Windows 2000 domain controller

As this is a business computer, I would direct your attention to forum policy:
In General, we do not help in cleaning business or corporate computers. There may be restrictions and modifications installed on such machines that could be damaged or altered by the actions we take to remove Malware. There may also be legal issues regarding any loss of business data that we do not wish to deal with.

This site exists for the purpose of helping home computer users rid their systems of malware, not business users, so I'm sorry we won't be able to help.
User avatar
silver
Regular Member
 
Posts: 9219
Joined: August 7th, 2006, 9:40 pm
Location: GMT+7

Re: Soxpeca & Co.

Unread postby datanet » November 18th, 2008, 7:35 am

Well - not everything is what it seems...
I am running this domain controller for family purposes, as the Server Software was given to me as a present. So therefore - yes! this is purely privat.
(My family is rather big...)
And I really don't want to format this machine... So please - anyone out there to help me?
datanet
Active Member
 
Posts: 3
Joined: November 13th, 2008, 6:58 pm

Re: Soxpeca & Co.

Unread postby silver » November 18th, 2008, 7:58 am

Also to be found on the rules page:
We CANNOT HELP remove malware from any of the Windows Server editions, like Windows 2003.
Again I am sorry but we won't be able to help you. We wish you the best of luck in resolving the issue.
User avatar
silver
Regular Member
 
Posts: 9219
Joined: August 7th, 2006, 9:40 pm
Location: GMT+7

Re: Soxpeca & Co.

Unread postby datanet » November 18th, 2008, 8:20 am

In this case I would like to kindly ask you to close and delete my account at your site.
Thanks
datanet
Active Member
 
Posts: 3
Joined: November 13th, 2008, 6:58 pm
Advertisement
Register to Remove


Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 71 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware