|
Answer» Hi all,
Great forum you have here I use the site alot while working on batches.
Right now I'm working on a removal tool for the vundo SPYWARE. I have ran into a problem though.
I need a utility to unload a dll from MEMORY so it can be DELETED.
The file loads with Winlogin and I can successfully SUSPEND winlogin and play with the files under it. I need the utility so I can make the fix automated. Less user interaction = less mistakes.
Any help would be appreciated and thanks in advance.
Atri/Dave
This tool from Symantec may help you out. Why re-invent the WHEEL?
http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html
The bottom of the page has instructions for running from the command line.
Hope this helps.
|
