View Single Post
Old 01-12-2008, 01:11 AM   #7 (permalink)
gotosleep
Registered User
 
Join Date: Jan 2008
Posts: 6
OS: Windows XP Home SP2


Re: perfs.exe, routing.exe - how do I get rid of them?

My copy of NOD32 was giving me problems. I tried AVG and avast! individually and was unhappy with both of them so I uninstalled and was gonna reinstall NOD32 later that night. Both perfs/routing.exe are removed because I read a guide on another site where I used some program called OTMoveIt (or something along those lines) and another fix but the files remained in my HijackThis reports as "O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\WINDOWS\system32\perfs.exe (file missing)". After running your fix they don't appear there anymore in HijackThis logs.

I wasn't sure if this would return to give me problems yet again since this infection is allegedly caused by a rootkit. I didn't think deleting both files from the SYSTEM32 directory is all I need to do to stop the rootkit.

Thanks!

Last edited by gotosleep; 01-12-2008 at 01:15 AM.
gotosleep is offline