Re: Problems removing Vmonde ---- htepo.com

Buck Rogers wrote:

Malke,

Thanks for the quick response. I didn't mention it in my post but I
ran Hijackthis and cleaned up some stuff. I downloaded spyware doctor
and stopzilla from links at bleepingcomputer and will try them out.
I'll post back my results.

When you run HijackThis, make sure you rename it first. There is malware - particularly some of the new variants of Vundo which install rootkits - that will hide certain registry keys from HJT if you run hjt.exe.

If your client has one of the Vundo rootkits (often picked up when installing dodgy codecs) then you may be able to eradicate it with guided help from the experts at BleepingComputer. Or not, in which case back up his stuff and do a clean install on your client's machine.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.

Relevant Pages

  • Re: Problems removing Vmonde ---- htepo.com
    ... When you run HijackThis, make sure you rename it first. ... - particularly some of the new variants of Vundo which install rootkits ... back up his stuff and do a clean install on your client's machine. ... I've put the hard drive on a test machine as the slave and have ...
    (microsoft.public.security)
  • RE: IEXPLORE.EXE Really sorry - need help with an old problem
    ... the download links provided below. ... Install Spybot and the DSO Exploit Fix. ... and then the Immunize button to block common Spyware programs from installing. ... HijackThis log. ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware, malware, Trojan and the like
    ... Instructions for getting and using Sysclean ... install the other Intermute programs, ... scan with HijackThis. ... Create a new folder on your Desktop or the C: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: TCP/IP CP reported error 31
    ... > A possible cause of this error is that the connection was ... > "Windows cannot unload your registry file. ... For possible spyware, download, install, update and ... SWI Forums- Post your HiJackThis logfile: ...
    (microsoft.public.win2000.dns)
  • RE: Windows Start Up Error
    ... then start by running TrendMicro's Sysclean ... After you have used Sysclean, install a full-featured av, update its ... scan with HijackThis. ... If you are running Windows ME or XP, ...
    (microsoft.public.windowsxp.general)