Free Weekly Tech Newsletter

AlwaysUp · 09-17-2002, 09:32 AM

I got up this morning and went to boot my PC. I got a Norton Antivirus Alert that said that a file, C:\WINDOWS\MSVXD.DLL was infected with the W32.Datom.Worm virus. I attempted to repair and Norton AV said it could not repair it. It was suggested to replace this file with an uncorrupted copy of this file. Where is this file located? Is it on my Win98 disk?

**HAL9000** · 09-17-2002, 10:12 AM

Removal Instructions.

Cricket · 09-17-2002, 10:17 AM

Quote:

Originally posted by AlwaysUp
It was suggested to replace this file with an uncorrupted copy of this file. Where is this file located? Is it on my Win98 disk?

Make sure you've removed or cleaned as much of the worm as possible from your system and then use sfc (system file checker...Start>Run> type in "sfc" and hit Ok) to extract that one file from the Win98 CD.

Cricket

**HAL9000** · 09-17-2002, 11:20 AM

It sounds to me thought that the worm creates the Msvxd.exe file, so deleting it shouldn't be a problem.

AlwaysUp · 09-17-2002, 05:51 PM

Hal, that's what I think, too. I know that Norton found it and asked me if I wanted to repair it, but when it could not, it just quarantined it. I went to my wife's machine and searched the C:\Windows folder and there was no MSVXD32.DLL file there! But....and this is a big "but"! My wife's system is acting funny too. At cold boot or shutdown or even a restart, the dialup networking wants to launch and connect me to the Internet. I went into msconfig and chose selective startup and began unchecking one by one. Guess what? Yep the wierd behavior goes away when I disable Norton. It infuriates me as there is never a phone number for these folks. I just bought this AV off their website and you'd think I had at least a free phone call to a tech. Hal9000, do you think that in about a week of running if I haven't had any system problems it would be ok to delete this quarantined file? Any Ideas on why the Norton on my wife's machine?

***glc*** · 09-17-2002, 06:02 PM

Your Norton is probably trying to connect to do an automatic live update. That's easy enough to disable in the program preferences. Do your live updates manually on Wednesday night or Thursday, they post the updates every Wednesday, more often if there is a hot item.

I avoid apps trying to connect altogether by simply setting the Connection option in Internet Options in control panel to "never dial a connection" - I have a shortcut to my DUN connection in my quick launch and I manually connect before I open any internet apps. I never saw the sense of having the thing automatically dial up when I open a web browser or email client. I guess I'm just too much of a control freak but at least I know that my computer isn't going to start dialing the Internet when it feels like it for whatever reason.

**HAL9000** · 09-17-2002, 08:19 PM

Ya... you can delete the file. If you are still unsure, you can leave it in quarantine, it won't cause any trouble there.

Dan · 09-21-2002, 10:10 AM

the MSVXD.DLL file IS the virus

09-17-2002, 09:32 AM	#1
AlwaysUp Member (11 bit) Join Date: Sep 1999 Location: Sherman, Texas Posts: 1,778	Norton antivirus found a worm! I got up this morning and went to boot my PC. I got a Norton Antivirus Alert that said that a file, C:\WINDOWS\MSVXD.DLL was infected with the W32.Datom.Worm virus. I attempted to repair and Norton AV said it could not repair it. It was suggested to replace this file with an uncorrupted copy of this file. Where is this file located? Is it on my Win98 disk? Share Share this post on Digg Del.icio.us Technorati Twitter __________________ Intel P4 2.4Ghz cpu, Intel D850MVSE mobo, ATI Radeon All-in-Wonder 8500 @275Mhz video, WD800JB 80Gb hdd, 1024Mb PC800 RDRAM, Sony DVD/CD-Rom, Sony CD-R/CD-RW, 330W Antec psu, Windows XP Pro-completed Jan. 2004

09-17-2002, 10:12 AM	#2
HAL9000 Red-eyed Moderator Staff Premium Member Join Date: Dec 1999 Location: Regina, Saskatchewan, Canada Posts: 17,576	Removal Instructions. Share Share this post on Digg Del.icio.us Technorati Twitter __________________ -At Ford, quality is job #1, job #2 is making them explode. ~Norm MacDonald, SNL News -Switching to Glide..Balancing in my head..inside of me... taking the glide path instead.

09-17-2002, 11:20 AM	#4
HAL9000 Red-eyed Moderator Staff Premium Member Join Date: Dec 1999 Location: Regina, Saskatchewan, Canada Posts: 17,576	It sounds to me thought that the worm creates the Msvxd.exe file, so deleting it shouldn't be a problem. Share Share this post on Digg Del.icio.us Technorati Twitter

09-17-2002, 05:51 PM	#5
AlwaysUp Member (11 bit) Join Date: Sep 1999 Location: Sherman, Texas Posts: 1,778	Hal, that's what I think, too. I know that Norton found it and asked me if I wanted to repair it, but when it could not, it just quarantined it. I went to my wife's machine and searched the C:\Windows folder and there was no MSVXD32.DLL file there! But....and this is a big "but"! My wife's system is acting funny too. At cold boot or shutdown or even a restart, the dialup networking wants to launch and connect me to the Internet. I went into msconfig and chose selective startup and began unchecking one by one. Guess what? Yep the wierd behavior goes away when I disable Norton. It infuriates me as there is never a phone number for these folks. I just bought this AV off their website and you'd think I had at least a free phone call to a tech. Hal9000, do you think that in about a week of running if I haven't had any system problems it would be ok to delete this quarantined file? Any Ideas on why the Norton on my wife's machine? Share Share this post on Digg Del.icio.us Technorati Twitter

09-17-2002, 06:02 PM	#6
*glc* Forum Administrator Staff Premium Member Join Date: May 2000 Location: Joplin MO Posts: 37,791	Your Norton is probably trying to connect to do an automatic live update. That's easy enough to disable in the program preferences. Do your live updates manually on Wednesday night or Thursday, they post the updates every Wednesday, more often if there is a hot item. I avoid apps trying to connect altogether by simply setting the Connection option in Internet Options in control panel to "never dial a connection" - I have a shortcut to my DUN connection in my quick launch and I manually connect before I open any internet apps. I never saw the sense of having the thing automatically dial up when I open a web browser or email client. I guess I'm just too much of a control freak but at least I know that my computer isn't going to start dialing the Internet when it feels like it for whatever reason. Share Share this post on Digg Del.icio.us Technorati Twitter

Need Some Help? Type Your Keywords Here:

Still Need Help? Type Your Keywords Here:

Free Weekly Tech Newsletter

09-17-2002, 08:19 PM	#7
HAL9000 Red-eyed Moderator Staff Premium Member Join Date: Dec 1999 Location: Regina, Saskatchewan, Canada Posts: 17,576	Ya... you can delete the file. If you are still unsure, you can leave it in quarantine, it won't cause any trouble there. Share Share this post on Digg Del.icio.us Technorati Twitter

09-21-2002, 10:10 AM	#8
Dan Member (11 bit) Join Date: Mar 1999 Location: Marlow,N.H. Posts: 1,273	the MSVXD.DLL file IS the virus Share Share this post on Digg Del.icio.us Technorati Twitter

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

Subscribe to THE INSIDER

Need Some Help? Type Your Keywords Here:

Still Need Help? Type Your Keywords Here:

Free Weekly Tech Newsletter