C:\Windows\System32\rundll32.exe is infected with Generic.Botget.8479801F. The virus has been succes

My apologies if I posted this in the wrong forum.

I got this message today: C:\Windows\System32\rundll32.exe is infected with Generic.Botget.8479801F. The virus has been successfully blocked and your PC is now safe.

One of the options is to remove the file - any suggestions what I should do next?

Thanks!

Find more posts tagged with

Comments

vpnavy

FWIW - I just cleaned out my Registry and Temporary files and rebooted. I ran a complete System Scan and no problems showed up. I am under the impression that the problem will only show up if the dll is executed?

Thanks!

vpnavy

Got this from another forum - so moved it to quarantine - so far - no problem: Kill it. It is a bundled dynanic link library file. Window will create a new one if needed.

Danielst

Hi Vpnavy,

Instead of killing it, it may be best if you would send us a bdsys log from the computer in order to investigate this issue.

To generate the bdsys log, use the link below and attach it to an e-mail at bitsy@bitdefender.com.

http://www.bitdefender.com/support/total-security/-490.html

Thank you,

vpnavy

If you had just sent this sooner - it was moved to quarantine and then removed. So far I am still living the dream!

TanLorik

I still recommend sending a BDSYSLOG, malware like this usually have some sort of persistence in registry/scheduled tasks/WMI events. If you submit a log we might be able to find out if something like this is present on the system. Also rundll32.exe is a windows component, it has to have the corresponding .dll file that is the actual malware.

vpnavy

54 minutes ago, TanLorik said:

I still recommend sending a BDSYSLOG, malware like this usually have some sort of persistence in registry/scheduled tasks/WMI events. If you submit a log we might be able to find out if something like this is present on the system. Also rundll32.exe is a windows component, it has to have the corresponding .dll file that is the actual malware.

OK - just sent it to your contact (per your e-mail). Can't wait to hear what you find.

Thanks!