I recently got infected by a virus, somehow.

I have determined all the files associated to this virus that launches multiple background iexplore instances, and deleted all of them

However, the key dll file that's powering the virus is very resiliant.

It made itself the MSAFD Tcpip [RAW/IP], MSAFD Tcpip [UDP/IP], MSAFD Tcpip [TCP/IP], RSVP TCP Service Provider, and RSVP UDP Service Provider under the Layered Service Provider.

If i try to delete the file or the entry in LSP, it will simply disable all network related functions in windows.

The operating system is Windows XP SP3
The key DLL file is wspio.dll

Can anyone please look up their entry for the 5 above LSP entry and tell me the DLL file they point to? So i can restore them please?

Thank you.

Recommended Answers

All 2 Replies

Those requesting assistance should begin by following all the steps given here;
http://www.daniweb.com/forums/thread134865.html
and then post back in your thread with all the requested logs. Then somebody will be happy to offer assistance.

nvm i figured it out

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.