How to find if my computer is infected with Gumblar? -

07 Sep 2010

Support Center » Knowledgebase » How to find if my computer is infected with Gumblar?

	How to find if my computer is infected with Gumblar?

Solution The antivirus in your system will not be able to detect Gumblar Virus as Gumblar would have already by-passed the antivirus. In this case, there is one way to find out if your local computer is infected with Gumblar Virus or not.

To find out if a computer is infected:

1) Locate sqlsodbc.chm in the Windows system folder (by default under Windows XP, the location is C:\Windows\System32\);

2) Obtain the Sha1 of the installed sqlsodbc.chm. FileAlyzer is a free tool that can be used to obtain the SHA1 of a file;

3) Compare the obtained Sha1 to the list located on the ScanSafe STAT Blog;

4) If the SHA1 and corresponding file size do not match with a pair on the reference list, it could be an indication of a Gumblar infection.

The most effective way to remedy an infection is to do a full reformat and reinstallation, according to ScanSafe. Passwords or login details that were stored or used on infected machines should also be changed.

Article Details

Article ID:

258

Created On:

25 Dec 2009 03:00 PM