New kind of Malware - c:\Program File\Rundlll\server.exe

I had face this attack on one of my computers.
The Norton Internet Security 2010 didn't see risk on this exe file.

But my computer still no good when this exe are running.

This server.exe make my accentuation so ugly, my languages and keyboard are mixed, more the keyboard when type letters so slow and losing a lot of keys typed.

My normal language was PT-BR and my keyboard was EN-US- International. On this infected computer no accentuation was correct, some keys not working and didn't exist, but if I changed input language to EN-US-International the accentuation was OK. I can type São Paulo - ação.

I found into windows Registers a lot of entries with "c:\Program File\Rundlll\server.exe" and c:\Program "File\Rundlll\server.exe /Restart". I removed by my hands all entries.

I tried to put this file quarantine, not allowed and not worked.
I needed to remove this file using my personal tools, I need to rescan all registers and fixed wrong ones.

Needed to reboot my computer several times, to clean it.

After no more references into the computer, my computer is back and works correctly.
That was a hard work to remove all references and the exe file. into the Program File folder on RUNDLLL sub-folder (with 3 L).

I can send more details.

 

This is a warning message, because here on Brazil is time for elections, and a lot of cyber attack is happening.

 

Thank you.

Paulo