dirote.exe problem

Hi Dave, Steven

I maybe wrong of cource, its not in paticular the exe that identifies this thing as hacker defender (killroot) its the use of that folder.

Edit added this I dont see the relationship, but thats what they have been telling me


all I know is its over my head, I do Hope our av program's learn to clean it up properly.

 

thanks for the advanced warning.trust my dad to get an unrecognised worm on his pc
i've already put my antivirus onto it and updated virus defs,aswell as doing a full system scan.getting a firewall in a week or so but why is UK stuff so expensive?

Edited : I've also tried windows media player and seems to work.

 

hello again.guess what?
i ran msconfig to look at the startup items and see which are selected.
dirote.exe and wmplayer.exe are there.they aren't selected though! i can't seem to find the f0r0r folder either so i'm hoping they are still there from last time.just wondering how i can get them deleted from the startup options?

 

Looks as though the AV companies are up-to-speed onthis one now. Scan with RAV and Housecall to be sure you're rid of it first. Then probably the easiest way to remove the entry is to recheck it and reboot, then fix it with HijackThis. You should also check the registry here
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services and delete the key ordor if present.