Thread: Bugger.
View Single Post
Old 04-20-09, 03:08 PM   #9
HunterICX
Rear Admiral
 
Join Date: May 2006
Location: Malaga, Espaņa
Posts: 10,750
Downloads: 8
Uploads: 0


Default

Quote:
Originally Posted by NeonSamurai View Post
As a guess I would say some virus scanner or malware scanner found and deleted the dll file, but left behind everything else particularly the registry entries.

You may have to finish the job by hand (or use a good scanner that will clear everything else, like spybot search&destroy).
Vundo even infests itself into msconfig, that will re-animate the Malware when you reboot the system and are connected to the internet.

I ran a fix called ComboFix which removed the virus from the windows key files

also use a Autorun Manager to disable&Remove these DLL's (they are easy to spot as the names are complete giggly goo)

and work OFFLINE to make sure it doesn't come right back in.

when I had this at work (Win XP)
I used the following

Spybot S&D - Detection and removal of minor files it could detect
AVG8.0 Free - Same as above

Combofix - remove the vundo from the windows key files
Autorun Manager - to disable the malware DLL files and remove them (also to check if your system is clean again)

and work offline ofcourse

you might want to double check everything so scan your PC multiple times to make sure you got rid of it.

HunterICX
__________________
HunterICX is offline   Reply With Quote