Let's not forget that the whole purpose of the HARD BOOT is to avoid having Vundo come back from memory.
It know it seems like an unnecessary precaution that would have no impact - but i have tested it.
One last thing... everything i posted above was just a specific "scenario".
Even in the scenario that you did not have to kill ANY processes such as smss.exe, winlogon.exe, explorer.exe ETC - you will still want to do a HARD boot - just to be safe, after rename and/or deletion.
Next time you get a pesty infection (hopefully you dont ever).. test it.
It know it seems like an unnecessary precaution that would have no impact - but i have tested it.
One last thing... everything i posted above was just a specific "scenario".
Even in the scenario that you did not have to kill ANY processes such as smss.exe, winlogon.exe, explorer.exe ETC - you will still want to do a HARD boot - just to be safe, after rename and/or deletion.
Next time you get a pesty infection (hopefully you dont ever).. test it.
