I get c:\winnt\help\natipi.dll is infected wth virtumonde.0 whenevr i boot my system,pls help me?

i thank kasthusb and soundmanc for answering my earlier question..


and to add to my wuestion,whn i run virus clean it tells me virus/adware ae cleaned/deleted.but the next day when i boot again the problem crops up.and sometimes when the antivirus package gets updated this natipi.dll infection problem comes up,,if anyone has a solution pls help me tons of thx in advance.





p.s: it is netipi.dll and not netapi.dll as soundman has asked

I get c:\winnt\help\natipi.dll is infected wth virtumonde.0 whenevr i boot my system,pls help me?
Since you have the path and the file name, just go to it, select it and right click on it and "Delete"!





You might want to disable System Restroe when doing this so that you don't have a copy in there.





Also, you might like to regedit and find other infected files and delete them, too.





Go to "Start" and click on it. Go to "Run" and click on it. In the dialog box that appears, type in "regedit" and hit Enter. In the Registry Edit Panel that appears, go to Edit and click on it. In the drop down menu that appears, go to Find and click on it. In the dialog box that appears, type in "virtumonde.0" and hit Enter. Select all the values that populate the right side of the panel and right click and delete all of them. Rep[eat this again doing Find Next. Once you get no results, you know that it's all gone.





Remember to disable System Restore while doing this so that you don't get a copy saved there.





Reboot and enable System Restore and you're home free!





All the best!





Cheers!
Reply:Virtumonde is adware,,, download AVG antispyware and scan your computer. It should find it and clean it or put it in the quarantine vault for you.





Hope this helps.





http://free.grisoft.com/doc/1/lng/us/tpl...
Reply:Turn off system restore then run your scanner.


Boot up again and see if it comes back, if it doesn't then its out and you can turn on system restore again.
Reply:Follow the instructions here


VundoFix.exe is a removal tool developed to remove Virtumonde infections. To use the tool follow the instrctions below.


http://www.atribune.org/content/view/24/...





How To Remove Winfixer / Virtumonde / Msevents / Trojan.vundo.b


http://www.bleepingcomputer.com/forums/t...





Then


(1) Get you self a good antivirus or a free one if your present anti virus is not protecting you .


(2) If you have not already scanned your comp with spybot do that now .Update it and then run it so it gets rid of all the spyware and trojans in safe mode


(3) Do an online virus scan to check if you still have any other viruses in your computer. And let us know if the online virus scan still finds any virus or spyware .