October 13th, 2004 05:30 AM
My friend has been infected by W32.Funner worm. He already did the steps in the removal instructinos. Now, when he try to login to window, it automatically logout. what can he do to remove the virus?
October 13th, 2004 05:41 AM
Ugh... Have you tried the obvious yet? HAHA! Try booting from safe mode and seeing if you can make the necessary changes from there.
October 13th, 2004 06:38 AM
Have you tried doing a manual removal?
Automated removals don't always take all the necassary steps to completely remove malware, especially when it's as new as Funner (Only about 2 days old). This worm spreads by using MS Windows Messenger and affects all Windows versions.. From what you said in your post, my guess would be an incomplete removal. If you only did an automatic removal, a
manual removal of all infected files and registry settings should be done also. The companies that provide these antivirus updates, are often under consider pressure to produce a 'fix' as soon as possible. This often leads to a misunderstanding of the worm and often incomplete
removals. For this reason you could also try downloading more recent virus updates or try different antivirus software. Funner is tricky to remove unless your familar with it. On load the worm copies itself over explorer, iexplorer, and rundll32.exe. This a survival strategy to keep the worm in memory.
The 3 files work together to keep the other two loaded. If a process is shutdown then another one will load it back. This worm is interesting to read about and complete removal instructions are at http://www.symantec.com/avcenter/ven...32.funner.html
Hope this helps...
We are a generation without a middle. We have no great war or depression. Our war is a spiritual one, our depression is our lives. We were all raised to believe that we\'ll all be millionaires and rockstars - But we won\'t.
And we are slowly learning this fact...And we are VERY pissed off about it!
October 13th, 2004 02:54 PM