Options

Virus problem, hidden files, help!

IdolisideIdoliside Registered User regular
A friend of mine had installed a crack for some software that didn't work (the fool) and as a result we have been having problems finding and removing a virus from the system. Any help would be good.

Symptoms: Slow performance on applications, at startup comes up with an error box saying "Rundll, cannot find module Ruvekifo.dll".

So we looked at the startup programs and found a program asking for three different executions, Kdglf.exe and Bijejezo.dll (which we found and deleted from the startup list.) and ruvekifo.dll, all three of these programs are hidden from the windows API so no search would work.

But Ruvekifo keeps coming up on the startup list when we restart or make changed.

We did a rootkit scan and found the registry location.

HKEY Local Machine/Software/Microsoft/Windows/Run

There was a key with rirawapola linked to the Ruvekifo.dll. Any attempts to delete this key resulted in it coming back next restart.

If anyone has any advice or help how to get rid of this please post!

Proud member of Noah's Wangship Steam Group
iusb_760x100.8161697.jpgBunting, Owls and Cushions! Feecloud Designs
Idoliside on

Posts

  • Options
    .kbf?.kbf? Registered User regular
    edited November 2008
    Why not just try running a virus scan?

    .kbf? on
  • Options
    IdolisideIdoliside Registered User regular
    edited November 2008
    .kbf? wrote: »
    Why not just try running a virus scan?

    Done the obvious. came up with nothing

    Idoliside on
    Proud member of Noah's Wangship Steam Group
    iusb_760x100.8161697.jpgBunting, Owls and Cushions! Feecloud Designs
  • Options
    Mmmm... Cocks...Mmmm... Cocks... Registered User regular
    edited November 2008
    Idoliside wrote: »
    .kbf? wrote: »
    Why not just try running a virus scan?

    Done the obvious. came up with nothing
    Though this might also be obvious, did you run a couple different kinds?
    I use three.

    Mmmm... Cocks... on
  • Options
    IdolisideIdoliside Registered User regular
    edited November 2008
    We have formatted the computer now. It needed it really but it was last resort. Thanks for anyone helping.

    Idoliside on
    Proud member of Noah's Wangship Steam Group
    iusb_760x100.8161697.jpgBunting, Owls and Cushions! Feecloud Designs
  • Options
    TopiaTopia Registered User regular
    edited November 2008
    Formatting. My Anti-Virus.

    Topia on
Sign In or Register to comment.