winvex32.dll - Dangerous

%sysdir%\winvex32.dll

Jeff's Story:

My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.

I sought a solution on the Internet and discovered your product and tried out the trial.

You quickly found the rootkit and SAVED my PC!

I haven't had any problems since, and I'm extremely grateful.

Manual removal instructions:

%sysdir%\winvex32.dll
winvex32.dll is rootkit Trojan.Nebuler-B.
winvex32.dll is used to hide files, processes and registry.
winvex32.dll is a user mode rootkit.
Rootkit contacts remote hacker server using HTTP session.
Related files:
%Temp%\cli1.bat
%SysDir%\winvex32.dll
Adds the value:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winvex32
DllName
winvex32.dll

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winvex32
Impersonate
0

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winvex32
Startup
EvtStartup
to the Windows startup registry keys.
Added to registry:
HKLM\SOFTWARE\Microsoft\MSSMGR\

Remove winvex32.dll now!