Re: force dll to unload and allow dll file to be deleted

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "Josh" <Josh@xxxxxxxxxxxxxxxxxxxxxxxxx>

| I have a pc that is infected with a portion of the Trojan.Vundo virus.
| Symantec will locate a specific dll file but can not delete it because it is
| in use by the Windows system. I've tried the Vundo Removal Tool from
| Symantec that is supposed to stop the process, but it claims to not find the
| Vundo virus on my system. This dll runs whether I'm in normal or safe mode.
| How do I force unload a dll from running in order that the dll file can be
| deleted?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus


The following tool will remove the WinFixer 2005 and Trojan Vundo infection.

Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.

Relevant Pages

  • Re: RUNDLL32.EXE w72ea2bc.dll Missing ....
    ... or you didn't completely remove an infection. ... Zak wrote: ... But after this virus, whenever i restart or open my computer, or laptop to be more specific, other than hibernating, a small dialog box appears saying the following: ... Is it ok to disable this DLL file ??? ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: W32.Tibick! How can I scan for this? Which anti vir will pick it up?
    ... >> Symantec, McAfee, and Sophos all list the virus by the name w32.tibick ... Sometimes different antivirus companies ... 100% that I don't have this w32.tibick infection? ...
    (microsoft.public.windowsxp.general)
  • besides reformat, how to get rid of virus online scan cant get rid of
    ... My computer restarts automatically, the symantec ... antivirus software - stopped in the middle of scan. ... The virus infection seems periodic, ...
    (microsoft.public.security.virus)
  • RE: besides reformat, how to get rid of virus online scan cant get rid of
    ... Hello Amy, ... It looks like your computer is infected by Backdoor.NTHack virus. ... My computer restarts automatically, the symantec ... The virus infection seems periodic, ...
    (microsoft.public.security.virus)
  • Re: Symantec shines
    ... >> I sent a known infected file tha was spammed here in usenet ... >> Symantec found the infection. ... Virus names were quite different ... > Interesting Symantec missed it. ...
    (alt.comp.anti-virus)