My computer has recently been infected by the virus Hacktool.rootkit via an hacked email from my brothers friend. And on top of that an adware called surfsidekick 3 has installed itself onto my computer. I have a Windows XP computer with a Norton Anti-Virus Program and installed McAfee Personal Firewall on my computer. I also bought Xoftspy 4.16, which is how i found out about surfsidekick3.
I have tracked Hacktool.rootkit back to the file msdirectx.sys, but I am unable to remove it. A message stating that it is in use and that I cannot remove items while they are being used flashes and cancels the removal. Same for the Surfsidekick3 folder.
I have seen on other sites, the the hacktool.rootkit is traced also to files named xpjava.exe and setup32.sys (or .exe?) but i have neither of those files (yes I clicked the Show hidden files button).
Norton's website advised that I turn off the System Restore control until I can remove the virus (so that it doesn't copy itself on to the restore) and can do another full scan of files. Unfortunately it doesn't instruct how to remove the file.
Any detailed help will be much appreciated in how to fix this situation. I'm pretty decent with computers but this is confusing? Thanks much.
//Mod edit: Moved from Windows XP/NT/2000/2003 forum to the more appropriate.
Edited by KoanYorel, 18 October 2005 - 03:37 PM.