simple trojan fix

Fortunately this is a jewel-boot cistern.
I went to WINNT/SYSTEM32
looked at directory, sorted by modification date
there at the bottom were a dozen DLLs with names of
6 or 7 gibberish letters, and dated in the last month
(when infected by vundo and conhook)
I looked at properties, there is no tab for versions
Inspect another PC - it has not these DLL files.
so I delete the vermin

and then refresh virus scanner, Java, Windows Updates etc.

In article <1192063003.242722.66400.DeleteThis@19g2000hsx.googlegroups.com>,
u235bomb.DeleteThis@ml1.net says...
> Fortunately this is a jewel-boot cistern.
> I went to WINNT/SYSTEM32
> looked at directory, sorted by modification date
> there at the bottom were a dozen DLLs with names of
> 6 or 7 gibberish letters, and dated in the last month
> (when infected by vundo and conhook)
> I looked at properties, there is no tab for versions
> Inspect another PC - it has not these DLL files.
> so I delete the vermin
>
> and then refresh virus scanner, Java, Windows Updates etc.
>
>
"jewel-boot cistern" ? I wish I had one of those.

I see you're running Windows 2000. Cool, so do I.

Your method will fail for many people as the DLLs will not be deletable. Maybe if they boot to Safe
Mode first. Even then, with some trojans it's not a good idea, as the registry will think one of those
DLLs is required and the system won't load without it. you have to clean up the registry at the same
time as the files, or preferably beforehand.
--
Snob? Were I a snob, I wouldn't be talking to you.