From: "RMG" <
[email protected]>
| my security system has identified the gebyy.dll file to contain a trojan
| horse. The system will not clean, quarantine or delete the file as is it is
| in the Windows\system32 directory and is write protected. How can I correct?
| --
| RMG
That DLL is assocaitaed with Trojan Vundo
The following tool shoould remove it.
Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close
NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.
Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }
A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.
* * * Please report back your results * * *