BackDoor.Generic11.ZNE, New Trojan Horse Options

[Fanfaronade]

Hey,

I'm pretty sure I've got a Trojan Horse up to no good on my machine. AVG 8's ResidentShield app repeatedly picks it up - I get the standard "Threat Detected" dialog box - and calls it a BackDoor.Generic11.ZNE. It seems to be repeatedly creating a file in my Windows/System32 folder called hjgruidrtsrfiu.dll, which AVG catches and quarantines, but within seconds it's back. I think it's being created when a number of user-initiated processes begin running: the most recent examples are C:\Windows\System32\taskeng.exe, C:\Windows\System32\RacAgent.exe, and, rather ironically, C:\Program Files\AVG\AVG8\avgcsrvx.exe. But it also appears when running many other processes.

In fact, I observe that opening the Control Panel is particularly good way to bring on a multiple threat detection. Telling AVG to remove the threats actually provokes a further two, always related to the processes C:\Windows\System32\SearchProtocolHost.exe and C:\Windows\System32\SearchFilterHost.exe. In each instance, the infected file is identically-named: hjgruidrtsrfiu.dll.

This traps me in a repeated cycle of okaying AVG's removal of the file, though doing so doesn't seem to lead to any major system instability. Depsite repeated full system scans, AVG doesn't seem to be able to get to the root of the problem, because it keeps popping up again with depressing regularity.

I haven't noticed much system performance degradation as yet, although, Windows informs me that "unauthorised changes" have been made which will prevent me from getting updates, and indeed this is now the case. Also, once I was informed Windows DNS controls are not working properly and had to be shut down. But the next time I started up the problem seemed to have gone away.

I've done a couple of web searches and this particular nasty seems to be a new one on most people. There are only a few other hits that Google returns to the search string "BackDoor.Generic11.ZNE" - one of them is an unanswered post on this very forum, in fact, just yesterday. The others are all on French or German-language forums, which isn't much help to me as I'm one of those awful monoglot Anglophones, but again they're dated very recently.

Any help much appreciated. Fraid I'm new to this business so I am not sure what system information you are likely to need. As a starting point, here's the basics:

Windows Vista HomePremium
Processor: Intel® Core™2 Quad CPU Q6600 @2.4GHz
Memory(RAM): 3.00GB
System Type: 32-bit Operating System


Thanks in advance,