A friend of mine had installed a crack for some software that didn't work (the fool) and as a result we have been having problems finding and removing a virus from the system. Any help would be good.
Symptoms: Slow performance on applications, at startup comes up with an error box saying "Rundll, cannot find module Ruvekifo.dll".
So we looked at the startup programs and found a program asking for three different executions, Kdglf.exe and Bijejezo.dll (which we found and deleted from the startup list.) and ruvekifo.dll, all three of these programs are hidden from the windows API so no search would work.
But Ruvekifo keeps coming up on the startup list when we restart or make changed.
We did a rootkit scan and found the registry location.
HKEY Local Machine/Software/Microsoft/Windows/Run
There was a key with rirawapola linked to the Ruvekifo.dll. Any attempts to delete this key resulted in it coming back next restart.
If anyone has any advice or help how to get rid of this please post!
Posts
Done the obvious. came up with nothing
Bunting, Owls and Cushions! Feecloud Designs
I use three.
Bunting, Owls and Cushions! Feecloud Designs