Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

New Malware From China ?


  • Please log in to reply
3 replies to this topic

#1 D72

D72

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:58 PM

Posted 07 August 2008 - 07:14 AM

i have problem with malware
i hope someone cen help mi to resolve this
in c:\windows\system32 and registry keys i found
catsrvwl.dll
certmgrkd.dll
cliconfgzx.dll
dispexcb.dll
lweurqhx.dll
scrruncqsj.dll
tscfgwmijxsj.dll

internet explorer start page changed to "http://about.blank.la/?g"


thanks

BC AdBot (Login to Remove)

 


#2 D72

D72
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:58 PM

Posted 07 August 2008 - 08:11 AM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
lweurqhx.dll
scruncqsj.dll

and more like that

need help sun is possible

#3 kahdah

kahdah

  • Security Colleague
  • 11,138 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Florida
  • Local time:09:58 AM

Posted 07 August 2008 - 11:17 AM

Hello D72

Welcome to BleepingComputer :thumbsup:
========================
Please download Deckard's System Scanner (DSS) and save it to your Desktop.
  • Close all other windows before proceeding.
  • Double-click on dss.exe and follow the prompts.
  • When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Please do not pm for help, post it in the forums instead.

If I am helping you and have not responded for 48 hours please send me a pm as I don't always get notifications.

My help is always free, however, if you would like to make a donation to me for the help I have provided please click here Posted Image

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 36,993 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:09:58 AM

Posted 07 August 2008 - 03:59 PM

Hello D72,

I have merged your latest topic in the HiJack This forum to your previously existing topic. Your latest topic now appears as post #2 in this thread. Please follow the instructions kahdah provided in what is now post #3. Please keep all posts regarding this issue to this topic by using the Add Reply button at the bottom of the topic. Starting new topics confuses things and delays the assistance you receive.

Back to you kahdah,

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users