|
Posted by foghollow on October 12, 2007, 4:05 am
If you were Registered and logged in, you could reply and use other advanced thread options
u235bomb@ml1.net says...
> Fortunately this is a jewel-boot cistern.
> I went to WINNT/SYSTEM32
> looked at directory, sorted by modification date
> there at the bottom were a dozen DLLs with names of
> 6 or 7 gibberish letters, and dated in the last month
> (when infected by vundo and conhook)
> I looked at properties, there is no tab for versions
> Inspect another PC - it has not these DLL files.
> so I delete the vermin
>
> and then refresh virus scanner, Java, Windows Updates etc.
>
>
"jewel-boot cistern" ? I wish I had one of those.
I see you're running Windows 2000. Cool, so do I.
Your method will fail for many people as the DLLs will not be deletable. Maybe
if they boot to Safe
Mode first. Even then, with some trojans it's not a good idea, as the registry
will think one of those
DLLs is required and the system won't load without it. you have to clean up the
registry at the same
time as the files, or preferably beforehand.
--
Snob? Were I a snob, I wouldn't be talking to you.
| 
XML site map