Semi bad virus trouble + Highjackthis log

[tal ormanda]

ok

[[deXter]]

Can I delete all the ones where the file is not found?

In the IE section there were .dll files which when googled, had no results. Can I delete these?

Under Browser Helper Objects:

kpbutpjot.dll

fjewgcqt.dll

yrhafajb.dll

bvolg.dll

Yes, randomly named BHOs = 99.9% chance they're malware.

[Tarun]

[deXter] is correct about the randomly named BHOs. I didn't see that you had edited your post as I had replied before your edit.

[tal ormanda]

Well, I'll go do that now lol!

Edited December 31, 2006 by tal ormanda

[coltm4carbine]

Sorry, Im not sure if I'm allowed to post this,

He has the vundo adware. Latest varient. (I can see it from the HJT log so don't flame me)

Rename HJT.exe to scan.exe.

Run another scan then u'll see the bad entries.

EDIT: Just saw the BHO entries. Those are the random ones from vundo that you *should* of seen with HJT.

Edited January 7, 2007 by coltm4carbine

[Jeremy]

Run pestpatrol 8

PestPatrol is well known for having more false-positives than actual malware.

Ad-Aware SE, Spybot, Windows Defender, CWShredder, About:Buster (for additional hijackers to CWShredder). SpywareBlaster is good also, but I personally just deal with removal of malware and not removal + software protection against potential future malware. You will do this yourself mostly by learning from mistakes.

Edited January 29, 2007 by Jeremy

[Tarun]

Unfortunately About:Buster has (and can) have times where it will wipe out the entire System32 directory.

[Jeremy]

Unfortunately About:Buster has (and can) have times where it will wipe out the entire System32 directory.

Hahaha, it's on your guide.

How would it do that? That folder is locked by Windows...

[Tarun]

Yeah, but in my Anti-Malware packages it's not included. It's even been removed from my website. The guide (and the packages) need to be updated.

I'm attempting to work on a nice utility to cut down on the packages sizes.