Author Topic: Dumaru-H : How to remove?  (Read 2919 times)

0 Members and 1 Guest are viewing this topic.

tomspot

  • Guest
Dumaru-H : How to remove?
« on: March 20, 2004, 06:34:02 PM »
Hi, I'm a new user and I have found the Dumaru-H worm on my family computer. The system is really old (Win98 2nd Ed.). Avast found this worm in three seperate files - C:\acrobat.exe, C:\npcult3dp.exe and C:\dialer.exe - when I tried to clean them all I got in the log was "Error occured during file repair....". I did a search here for this topic and all I found was 1 topic saying something about removing a message from Outlook. I'm not an expert but could someone tell me what I should do?
Apperently this got onto my system (or at least the files were last modified) on Oct.22, 2003. Can someone give a newbie some slack?
Cheers,
tomspot










 

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re:Dumaru-H : How to remove?
« Reply #1 on: March 20, 2004, 09:18:50 PM »
Did you try SpyBot or Ad-aware cleaning? Maybe that applications could detect and remove the files.
Repairing is not an easy work for an antivirus. Backup and restore are the only possibility sometimes. But that files do not seem to exist in normal systems. Probably they were added.

Maybe some other member could help you more with this thread than I.
The best things in life are free.

whocares

  • Guest
Re:Dumaru-H : How to remove?
« Reply #2 on: March 21, 2004, 07:14:26 PM »
Hi,

the avast info on this is a bit disappointing:
http://www.avast.com/i_idt_1446.html
doesn't even state if it's able to clean it; if you want to try it with avast, do it in SafeMode (F8-Boot)


but look at the red links here:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=dumaru-h&product=1
trend, macfee and symantec should be the most helpful
 ;)

P.S.: Look here:
http://www.bitdefender.com/bd/site/virusinfo.php?menu_id=1&letter=d
and follow one of the dumaru-Links to download the removal-tool (at bottom of the descriptions page)



« Last Edit: March 21, 2004, 07:20:20 PM by whocares »

tomspot

  • Guest
Re:Dumaru-H : How to remove?
« Reply #3 on: March 23, 2004, 04:58:24 AM »
Thanks a lot guys!!! I'll try anything 'cause it looks like my Outlook Express has not loaded at all apparently since about the same time. (My mother uses this computer all the time and I did not find out about this until just recently, she's just using Outlook instead) Thanks alot.

:-)
tomspot