Computing.Net > Forums > Security and Virus > .dll's viruses

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

.dll's viruses

Reply to Message Icon

Name: aboucher
Date: October 7, 2006 at 08:19:03 Pacific
OS: win xp pro
CPU/Ram: 248 mb
Product: HP/Compaq
Comment:

on my computer, samantec has been comming up with a 'Virus Alert' over and over again. i 'x' it out, but it pops back up again...it just keeps finding over and over again. and it says "deleting failed, quarantine failed, acces denied". the path to the viruses are C:\ WINDOWS\System32\dplenh.dll and ...\gebyyax.dll. going to it from windows explorer, and trying to delete it manually (I dont like to do that) says that the file is in use.
any help is greatly appricated...thanks
Andy

P.S. I tried in safemode as well, and same result

The internet is no longer a toy...it is a combat zone!!



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: October 7, 2006 at 08:40:42 Pacific
Reply:

You have Vundo or Winantivirus Pro 2006.

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified.

Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop.
Doubleclick on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue.
Put a check by "Create a desktop icon" then click "Next" again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click "Finish" and it will launch Hijack This.

Exit Hijack This. Rename hijackthis.exe as that sometime helps locate the baddies. Go to start> search> files and folders> type in the top space "hijackthis.exe" without the quotes> click search> when it is found in the right pane (looks like a pile of dynamite)>right click on it> click rename> rename it "show.exe" without the quotes> click a blank space on the screen.

Run Hijack This, click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

Please download VundoFix.exe to your C:\.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.Please download ComboFix to the Desktop from this link:

http://download.bleepingcomputer.com/sUBs/combofix.exe

Double-click combofix.exe
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to hang.)

Please post the combofix.txt log


0
Reply to Message Icon

Related Posts

See More


I think I have a bad one EyeOnBrowser Virus



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: .dll's viruses

dll's invalid, low virtual mem hlp! www.computing.net/answers/security/dlls-invalid-low-virtual-mem-hlp/11880.html

Today's virus count, 18 www.computing.net/answers/security/todays-virus-count-18/5795.html

missing dll32.exe and other dll's www.computing.net/answers/security/missing-dll32exe-and-other-dlls/7965.html