As was foretold, we've added advertisements to the forums! If you have questions, or if you encounter any bugs, please visit this thread: https://forums.penny-arcade.com/discussion/240191/forum-advertisement-faq-and-reports-thread/
Options
Virus problem, hidden files, help!
Idoliside
Registered User regular
Registered User regular
A friend of mine had installed a crack for some software that didn't work (the fool) and as a result we have been having problems finding and removing a virus from the system. Any help would be good.
Symptoms: Slow performance on applications, at startup comes up with an error box saying "Rundll, cannot find module Ruvekifo.dll".
So we looked at the startup programs and found a program asking for three different executions, Kdglf.exe and Bijejezo.dll (which we found and deleted from the startup list.) and ruvekifo.dll, all three of these programs are hidden from the windows API so no search would work.
But Ruvekifo keeps coming up on the startup list when we restart or make changed.
We did a rootkit scan and found the registry location.
HKEY Local Machine/Software/Microsoft/Windows/Run
There was a key with rirawapola linked to the Ruvekifo.dll. Any attempts to delete this key resulted in it coming back next restart.
If anyone has any advice or help how to get rid of this please post!
Symptoms: Slow performance on applications, at startup comes up with an error box saying "Rundll, cannot find module Ruvekifo.dll".
So we looked at the startup programs and found a program asking for three different executions, Kdglf.exe and Bijejezo.dll (which we found and deleted from the startup list.) and ruvekifo.dll, all three of these programs are hidden from the windows API so no search would work.
But Ruvekifo keeps coming up on the startup list when we restart or make changed.
We did a rootkit scan and found the registry location.
HKEY Local Machine/Software/Microsoft/Windows/Run
There was a key with rirawapola linked to the Ruvekifo.dll. Any attempts to delete this key resulted in it coming back next restart.
If anyone has any advice or help how to get rid of this please post!
Proud member of Noah's Wangship Steam Group
Bunting, Owls and Cushions! Feecloud Designs
Bunting, Owls and Cushions! Feecloud DesignsIdoliside on
0
Posts
Done the obvious. came up with nothing
I use three.