Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Infected - Not Sure What? [CLOSED]


  • This topic is locked This topic is locked

#1
ineedhelpsoon

ineedhelpsoon

    New Member

  • Member
  • Pip
  • 2 posts
I'm in way over my head but trying to figure out how to get rid of whatever has taken over my computer. I've updated my Windows, updated and run my McAfee, updated and run my Search and Distroy and have downloaded and run Vundofix -- many times. It seems nothing can get rid of whatever this is -- I apologize but don't even know enough to determine what it is -- I need help!! My computer is acting very strange, when using IE, new IE windows open with sites I've not elected to go to, some very undesible and all VERY annoying! Also, when on a website often my task bar and all desktop icons disappear and the only way I can get them back is to reboot my computer. I've finally figured out where to get these log files and am hoping someone can give me direction on how to get rid of whatever I've got!! :) Sorry if I haven't posted properly but am hoping someone will be willing to help?


VundoFix V7.0.6

Scan started at 9:30:07 PM 6/28/2008

Listing files found while scanning....

C:\Windows\system32\FNTELkkj.ini
C:\Windows\system32\FNTELkkj.ini2
C:\Windows\system32\jkkLETNF.dll
C:\Windows\system32\mlJDsTLf.dll

Beginning removal...

Attempting to delete C:\Windows\system32\FNTELkkj.ini
C:\Windows\system32\FNTELkkj.ini Has been deleted!

Attempting to delete C:\Windows\system32\FNTELkkj.ini2
C:\Windows\system32\FNTELkkj.ini2 Has been deleted!

Attempting to delete C:\Windows\system32\jkkLETNF.dll
C:\Windows\system32\jkkLETNF.dll Has been deleted!

Attempting to delete C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\mlJDsTLf.dll Could not be deleted.

Performing Repairs to the registry.
Done!

VundoFix V7.0.6

Scan started at 9:58:05 PM 6/28/2008

Listing files found while scanning....

C:\Windows\system32\mlJDsTLf.dll

Beginning removal...

Attempting to delete C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\mlJDsTLf.dll Could not be deleted.

Performing Repairs to the registry.
Done!

VundoFix V7.0.6

Scan started at 12:03:53 AM 6/29/2008

Listing files found while scanning....

C:\Windows\system32\ljJYQKBU.dll
C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\UBKQYJjl.ini
C:\Windows\system32\UBKQYJjl.ini2

Beginning removal...

Attempting to delete C:\Windows\system32\ljJYQKBU.dll
C:\Windows\system32\ljJYQKBU.dll Has been deleted!

Attempting to delete C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\mlJDsTLf.dll Could not be deleted.

Attempting to delete C:\Windows\system32\UBKQYJjl.ini
C:\Windows\system32\UBKQYJjl.ini Has been deleted!

Attempting to delete C:\Windows\system32\UBKQYJjl.ini2
C:\Windows\system32\UBKQYJjl.ini2 Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V7.0.6

Scan started at 2:48:41 PM 6/29/2008

Listing files found while scanning....

C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\NWxacMoq.ini
C:\Windows\system32\NWxacMoq.ini2
C:\Windows\system32\opnlMeFy.dll
C:\Windows\system32\qoMcaxWN.dll
C:\Windows\system32\tuvSmnNe.dll
C:\Windows\system32\yFeMlnpo.ini
C:\Windows\system32\yFeMlnpo.ini2

Beginning removal...

Attempting to delete C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\mlJDsTLf.dll Could not be deleted.

Attempting to delete C:\Windows\system32\NWxacMoq.ini
C:\Windows\system32\NWxacMoq.ini Has been deleted!

Attempting to delete C:\Windows\system32\NWxacMoq.ini2
C:\Windows\system32\NWxacMoq.ini2 Has been deleted!

Attempting to delete C:\Windows\system32\opnlMeFy.dll
C:\Windows\system32\opnlMeFy.dll Has been deleted!

Attempting to delete C:\Windows\system32\qoMcaxWN.dll
C:\Windows\system32\qoMcaxWN.dll Has been deleted!

Attempting to delete C:\Windows\system32\tuvSmnNe.dll
C:\Windows\system32\tuvSmnNe.dll Has been deleted!

Attempting to delete C:\Windows\system32\yFeMlnpo.ini
C:\Windows\system32\yFeMlnpo.ini Has been deleted!

Attempting to delete C:\Windows\system32\yFeMlnpo.ini2
C:\Windows\system32\yFeMlnpo.ini2 Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V7.0.6

Scan started at 4:50:28 PM 6/29/2008

Listing files found while scanning....

C:\Windows\system32\mlJDsTLf.dll

Beginning removal...

Attempting to delete C:\Windows\system32\mlJDsTLf.dll
C:\Windows\system32\mlJDsTLf.dll Could not be deleted.

Performing Repairs to the registry.
Done!
  • 0

Advertisements


#2
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Hello

Please download RUNSCANNER to your desktop and run it.
  • When the first page comes up select Beginner Mode
  • On the next page select Save a binary .Run file (Recommended) then click Start full scan at the top.
  • At this time Runscanner.exe may request access to the Internet through your firewall please allow it to do so, it will then run for two or three minutes.
  • On completion it will ask for a location to save the file and a name. It will do this for both the .run file and the log
  • Call the file "Select a file name here" and save it to your desktop. You will see the .run file on your desktop. Please zip the .run file by right clicking and selecting send to Zip file

Then upload that as an attachment in your next post.
  • 0

#3
ineedhelpsoon

ineedhelpsoon

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts
Thanks -- I've followed your direction, here is the zip fie -- Thanks,

Attached Files


  • 0

#4
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Hello

Download the zipped attachment at the end of this post(this will be your runscanner as fixed by me)

  • Unzip it to your desktop then double click the runscanner icon this will run the program.
  • Click on the "Item Fixer" tab
  • You will notice several entries with a tick in red, click Fix checked.
  • Accept the warning then repeat until they are all gone.




Reboot and do this

Please visit this web page for instructions for downloading and running ComboFix

http://www.bleepingc...to-use-combofix

This includes installing the Windows XP Recovery Console in case you have not installed it yet.

For more information on the Windows XP Recovery Console read http://support.microsoft.com/kb/314058.

Once you install the Recovery Console, when you reboot your computer, you'll see the option for the Recovery Console now as well. Don't select Recovery Console as we don't need it. By default, your main OS is selected there. The screen stays for 2 seconds and then it proceeds to load Windows. That is normal.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.
  • 0

#5
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP