strange DLL using winlogon notify (help?)

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by splavik, Jul 4, 2006.

  1. splavik

    splavik Private E-2

    Hi guys,

    I have run HjT, etc.... i have this dll in my winlogon notify.. this thing just can't be deleted.. i tried delete on boot etc..

    i'm going to put the whol log on here but come on.. whats up with this line?
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\nnnnmmk.dll

    O20 - Winlogon Notify: nnnnmmk - C:\WINDOWS\SYSTEM32\nnnnmmk.dll

    anyone have this nnnnmmk.dll ? who would name a dll like this?

    any help would be appreciated - i am currently on in safemode, and haven't seen any popups since i ran HjT along with all other utils i could...

    so i wait for a reply from this forum before i reboot ... thnx

    Splavik
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    We require standard cleaning procedures to be followed before we will work on HijackThis logs. These procedures are in the READ & RUN ME FIRST Before Asking for Support sticky thread.

    If you want to try to fix this on your own and feel you are capable of doing that, see other similar threads like below:

    http://forums.majorgeeks.com/showthread.php?t=96201

    You will have to figure out the appropriate things to put in the registry patch and file names to use in all spots yourself.

    Your problem is referred to by a few names, like winlogonhook and ConHook.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds