Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Eradication of An Annoyance


  • Please log in to reply
3 replies to this topic

#1 Arkin

Arkin

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:11:05 PM

Posted 11 October 2004 - 01:17 PM

:thumbsup: McAfee every now and then kills a Del-457 trojan from my boss's machine. I have used Spybot and Adware to locate and eliminate the adware (called virtumondo and another). When I run the McAfee there is a file I cannot delete. It is called "C:\WINDOWS\msagent\CHARS\psms.exe rerun". I turned off the system restore and went into safe mode. I then tried to delete this file from the registry but I believe because of the "rerun" it keeps putting itself back in automatically. I ran Hijack this and tried to delete it but it would not delete. Any help would be appreciated. Thank you.

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,663 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:05 PM

Posted 11 October 2004 - 01:20 PM

I am working on a tutorial for this particular infection literally as we speak. Once i get it posted, I will let you know here. Should be about a half hour till its done :thumbsup:

#3 Arkin

Arkin
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:11:05 PM

Posted 11 October 2004 - 01:44 PM

You are very kind.

#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,663 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:05 PM

Posted 11 October 2004 - 02:48 PM

> How to remove Virtumonde DEL-457 Host.exe malware

Hope this helps




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users