pepsov

Plus, I had to remove C:\WINDOWS\system32\shel9 C:\WINDOWS\system32\oc9 C:\WINDOWS\system32\ipd1 C:\WINDOWS\system32\ex1 and a couple of registry entries that ComboFix identified as suspicious. Exactly as EnterpriseSupport described the symptoms (excellent job, btw!). ComboFix and VundoFix did find infections, but failed…

Exactly as EnterpriseSupport described the symptoms (excellent job, btw!). ComboFix and VundoFix did find infections, but failed to delete the files. So I booted off an Ubuntu 7 live CD (it supports NTFS in read-write mode) and looked at the system32 folder in detail. Removed the infected files that VundoFix discovered,…