VBS/Psyme

HaX

HaX

Associate
Joined
19 Oct 2002
Posts
2,080
Location
Berkshire
Hi all,

I spent the vast majority of this afternoon trying to rid a PC of the VBS/Psyme trojan.

Does anyone know how to get rid of it?

Mcafee is detecting and deleting an infected script from the temporary internet files folder of the currently logged on user, however it appears to regenerate upon the next logon. It is not user specific, it is happening to anyone who logs onto the pc, thus meaning there must be a process or dll being called which generates the script file at logon.

I have checked for suspicious startup items, proccesses and services without yielding any results.

Any ideas?

Cheers

HaX
 
Back
Top Bottom