I found out a new virus in my computer today and I eventually got rid of it, below are the details of this virus:
rundll32.exe (not a virus) *affected
byjdpxgo.dll <-- starts up (VIRUS) startup name * Name: BMe30d5070
Path: Rundll32.exe "C:\WINDOWS\system32\byjdpxgo.dll"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
So, after when I deleted it, then it renamed itself again:
Name: e03e63ec
Path: rundll32.exe "C:\WINDOWS\system32\lrlrvovu.dll"
Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
So, if you want to remove it then you should get a Live CD but dont boot to normal windows yet. After that delete the infected dll's, delete rundll32.exe and then restart the pc. This virus normally changes the services and startup items and disables the below services:
telephony
tcp/ip
windows installer
Hope this helps someone out.
Bookmarks