Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Disappearing desktop


  • Please log in to reply
2 replies to this topic

#1 AOC99

AOC99

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:29 PM

Posted 22 October 2008 - 12:30 PM

My desk top disappears and reappears every 8 - 10 seconds.
Task manager shows that explorer.exe is disappearing and then re-starting

Action taken:
run spybot - both from computer and when it requsted allowed it to automatically run on rebooting
McAfee installed

PrevX CSI indicated that the following file is bad
Windows\system32\awtRLcDU.dll but unable to delete it or find information about it.
I have tried changing ownership of this file. ONLY Prev CSI indiactes this is a virus, no toher software does this.

Some strange dlls in system32, see below:
-rw-rw-rw- 1 user group 249856 Jul 18 19:00 pdfmona.dll
-rw-rw-rw- 1 user group 720896 Jul 30 06:44 C-XLS.dll
-rw-rw-rw- 1 user group 221184 Aug 01 14:36 SII_PDF.dll
-rw-rw-rw- 1 user group 61440 Aug 29 09:53 dnssd.dll
-rw-rw-rw- 1 user group 65536 Aug 29 09:53 jdns_sd.dll
-rw-rw-rw- 1 user group 106496 Oct 09 18:15 ATL71.DLL
-rw-rw-rw- 1 user group 271872 Oct 21 11:17 ljJAroLf.dll
-rw-rw-rw- 1 user group 37888 Oct 21 21:40 awtRLcDU.dll

Current workaround is to remove explorer.exe from task manager
Copied explorer.exe t exploreraoc.exe and run this from task manager
This at least gives me a icon tree structure *similar to double clicking on computer) to ease navigation.
I am also using command window for navigation.

I have tried all I can think of to remove this virus, so getting quite close to re imaging disk.

Your advises will be appreciated.
Thanks,
Aubrey.

BC AdBot (Login to Remove)

 


m

#2 Maniac

Maniac

  • Members
  • 95 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria, EU
  • Local time:12:29 AM

Posted 22 October 2008 - 12:37 PM

Download ESET SysInspector
http://www.eset.com/download/sysinspector.php

- Start program through the SysInspector.exe
The program will collect information about the situation on your machine.
- When "inspector" is ready and log file - generated, select File> Save Log
- Confirm their wish

Choose to save the file somewhere and then upload on http://4storing.com/ (when you open the page, click on the Great Britain flag to open the page in English), then give me the link.


Posted Image

#3 AOC99

AOC99
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:29 PM

Posted 22 October 2008 - 07:54 PM

Than you for your help.
I downloaded sysinspector as you reocmmended.
Investigated the dlls under files, and as I correctly thought these two files in system32
ljJAroLf.dll
awtRLcDU.dllHad their "fingers" in all sorts of executables.down loaded malwarebytes and ran it.
They also identified these two files, amongst others.
On reboot they were able to delete these files from system32.

now running relatively smoothly.
Thanks again,
Aubrey.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users