2008-10-25

Vundo.Gen

I got Vundo.Gen from the Internet and my Avast Home Edition 4.8 found something a little suspicious, but it failed to actually handle the infection. Using TuneUp I found out a link to a strange named DLL in the Windows\System32 that started with Windows. The file handle was locked by three processes, one of witch was Windows Explorer. I had to use Unlocker to be able to delete the file. Later I use VundoFix to rescan for Vundo and I deleted 6 more files that were not the trojan (therefore this tool sucks).
When a file is suspicious, a cool way to found out if it is clean is to use VirusTotal service where you upload the file and it is checked with 36 antivirus engines.

Niciun comentariu: