Hi, will try this. Pity the MS product does not pick this one up. If you use
Hijackthis to try and remove the DLL, Defender reports that it has returned
(if you select Block as action, it reports succeeded but within seconds
reports it has detected it again)
PandaActive scan and SpyDoctor both detect this one. AdWare and Spybot don’t
even see it.
Still, it is only really a problem for MS Explorer users. I have Firefox
installed as well and this DLL does not redirect my browser to other sites.
Only Explorer repeatedly does this and launches a text box inviting me to
download an AntiSpy/ Virus product to fix the problem this DLL put in my
machine!
At a loss as to how this got in: how can an application which is not signed
be loaded without my concent?
"Engel" wrote:
> Hello España,
>
> Coñooo :-)
>
> Try this
> http://www.geekstogo.com/forum/How-t...ib-t91765.html
>
> Jolines ;-) For the benefit of the community reading this post, please rate
> the pºst.
>
> I hope this post is helpful.
>
> Let us know how it works ºut.
>
> Еиçеl
>
> "Espana2006" wrote:
>
> > Does anyone know how to remove this dll? I think it is part of Virtumonde.
> >
> > Defender detects its presence but when you try to block it, it reports
> > "succeeded" then alerts you to the DLL presence again.
> >
> > This DLL periodically directs you to an antiVirus website where you can buy
> > a solution..
> >
