Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Assistance needed with gelarijo,lefopase,fikuyelu.dll


  • This topic is locked This topic is locked
2 replies to this topic

#1 jscorsone

jscorsone

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:41 PM

Posted 26 June 2009 - 03:53 PM

Hi,

I'm having problems removing a trojan from my parents PC. The performance is very slow and they are receiving many popups. There was a fake popup for upgrade to IE8 which I think they clicked on at some point.

They had Trend Micro, but the subscription had lapsed.

I uninstalled Trend Micro, installed AVG, ran AVG in normal and safe mode, but there are three items that are still appearing in the msconfig window upon startup that look suspicious so I think i've been unsuccessful. They appear to be:
gelarijo.dll
lefopase.dll
fikuyelu.dll

Also, upon system shutdown they always receive a rundll32.exe error.

I've turned off system restore and backed up the PC.

The two D.D.S. logs are attached.

Any help would be greatly appreciated, thanks!

Jordan

Attached Files


Edited by jscorsone, 26 June 2009 - 03:57 PM.


BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:08:41 PM

Posted 30 June 2009 - 08:29 PM

Hello jscorsone,

Posted Image

Sorry about the delay.:thumbup2: If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Please do this:
1. Download HijackThis™ here:
http://www.trendsecure.com/portal/en-US/th.../hijackthis.php

2. Click 'Do a System Scan and Save log'.
The HJT log will open in notepad.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:08:41 PM

Posted 06 July 2009 - 06:53 AM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users