sysd.dll - Dangerous
%sysdir%\sysd.dll
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Wininet.exe is added to the Windows startip registry keys.
Also in the registry key
HKEY_LOCAL_MACHINE\Software\Classes\exefile\shell\open\command
worm changes the (Default) value to
%System%\wininet.exe"%1" %*
This causes the wininet.exe to run when you attempt to run an .exe file.
Related files:
-%SysDir%\Sysd.dll
-%SysDir%\Exelib.dll
Restore default file extensions using RegRun Start Control.
After thatkill the process %SysDir%\wininet.exe and remove wininet.exe from Windows startup.