Problem with Hacktool.Rootkit Virus

Hi,
One of my Windows 2000 Professional system in Our Domain is appear to be
effected with virus Hacktool.Rootkit with the file name
c:\winnt\system32\msdirectx.sys, c:\msdirectx.sys. Norton detects and it is
saying "Defwatch scan. Action: Clean failed : Leave Alone succeeded : ". I
am using the latest Norton Corporate edition 8.0. But still this virus
appears in alternate days. I have no idea, where from it is still coming
and how to remove this permenantly? Can you help me to how to solve this
problem?

Yeah.

Format, and rebuild.

If it's a rootkit, it's the only way to be sure.

Matt Gibson - GSEC

"Sabu Kottai" <(E-Mail Removed)> wrote in message
news:15321547-D777-43B7-87B9-(E-Mail Removed)...
> Hi,
> One of my Windows 2000 Professional system in Our Domain is appear to be
> effected with virus Hacktool.Rootkit with the file name
> c:\winnt\system32\msdirectx.sys, c:\msdirectx.sys. Norton detects and it
> is
> saying "Defwatch scan. Action: Clean failed : Leave Alone succeeded : ".
> I
> am using the latest Norton Corporate edition 8.0. But still this virus
> appears in alternate days. I have no idea, where from it is still coming
> and how to remove this permenantly? Can you help me to how to solve this
> problem?
>