Virus or something =/

Discussion in 'Malware Help (A Specialist Will Reply)' started by StereoApathy, Jul 10, 2006.

  1. StereoApathy

    StereoApathy Private E-2

    Something on my compy is creating these random string dll files. Ad-Aware scans and finds them but can't delete them. BitDefender doesn't even see them. They don't show up in HijackThis. They're mad crazy and I realized a couple of things: they all have the size 230kb so it makes it easy to find them all, they always come in pairs of random strings and then one random file (i've seen guard.tmp and now it's iggutil.dll), I tried a couple of different unlocking and forcedelete progs cause I couldn't delete them and they wouldn't show up in Ad-Aware's process watch but I found out they're attaching themselves to winlogon.exe which I can't terminate. The really vicious part of w/e this is is that it makes new copies of itself everytime I login. I tried running in commandprompt mode but in that they haven't been created yet =/ and the old ones are dead or something. I don't understand how I can get rid of something like this. I don't know exactly what it's doing but I figure it has something to do with the 52 other viruses I found and all the spyware like Zedo and Surfsidekick. I'm pretty sure I know how I got it but I've got no idea how to get rid of it. I'm running Windows XP and I'm hella confused.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    .
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds