Does anybody know how to get rid this.
Thanking in advance
What is your OS ?
What was the infected file name, where was it found example (C:\windows\system32\infected-file-name.xxx) ?
What actions have you taken to try and resolve the problem ?
If avast detected it, what choice did you select, Move to Chest, Delete, etc. what (see image for example) ?
Hi pblietz,
Download the vundoo removal tool, and run it. Link for this is to be found here: http://securityresponse.symantec.com/avcenter/FixVundo.exe
polonus
thanks. ran vundo removal. still appears on start up
my o/s is XP home
the file seems to change name
last time it was
c:document~1/peter/locals~1/temp/losrvgkw.dll
now it is
c:document~1/peter/locals~1/temp/oihcettt.dll
driving me up the wall. am about to sell my first born
Thanking for all help
peter
Hi pblietz,
The file names you mention are just random names and so meaningless. They don’t help identify the problem.
First of all you need to try a boot time scan with avast! Open the avast! scanner and right click anywhere on the screen, and select the boot time option from the menu. Make sure you have a keyboard with a cable plugged in- cordless keyboards don’t work during a boot time scan.
After that, scan with Ewido (if your OS supports it), Ad-Aware, Spybot Search & Destroy and a-Squared. Download install and update all these before you scan with avast and scan in safe mode if possible while off line after doing the boot time scan.
If you still have problems, please post a HijackThis! log.
http://www.bleepingcomputer.com/tutorials/tutorial42.html
Is your OS up to date and do you have a firewall operating? If not, you will get reinfected easily.
Here’s some links:
Ewido http://www.ewido.net/en/
a-Squared http://www.emsisoft.com/en/
Ad-Aware http://www.majorgeeks.com/download506.html
Spybot Search & Destroy http://www.safer-networking.org/
Good luck!