Tnx alot.
Took me less then 60 min to get a hold of a fix, with some help of "ur" post
so tnx alot =)
Got the days data saved and formatting in progress.. (just in case)
Was little worried there for some time since ive been trying to figure this
out for the last 7h.
Finaly time to get some Zzz..
"Malke" wrote:
> Illusion wrote:
>
> > Need any help i can get to remove ddcDwwwW.dll wich in turn contacts some
> > web server and downloads sevral other virus files..
> > Tryied to remove it before internet was turn on but no luck.
> > Got some files wich it downloads as soon as internet is there, but simply
> > cant remove that host file..
> > It slows down internet speed by 98% so online scanners cant reach it in
> > time before it activated another entry for it..
> > And same with the virus program, since it is in the temp dir i tryied to
> > only scan that dir but same result..
> > When the scan was done after 5 sec for temp dir the file had made 112 new
> > entrys linked to the file so it could not be removed..
> > Every time u tries to simply delete it it makes some other crappy entry
> > and resetts..
> > Virus program ref to utlrexue.dll and lvlpdtev.dll
>
> Googling for those names brings up nothing, but this is not surprising since
> it is common for viruses/malware to name their files randomly. It does make
> it difficult to give you pinpointed removal steps, however. You should go
> through these general malware removal steps systematically -
>
http://www.elephantboycomputers.com/page2....emoving_Malware
>
> Include scanning with David Lipman's Multi_AV and follow instructions to do
> all scans in Safe Mode. Please see the special Notes regarding using
> Multi_AV in Vista.
>
>
http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
>
http://tinyurl.com/yoeru3 - download link and more instructions
>
> You can also check to see if there are targeted removal steps for your
> malware here:
> Bleeping Computer removal how-to's -
>
http://www.bleepingcomputer.com/forums/forum55.html
>
> When all else fails, get guided help. Choose one of the specialty forums
> listed at the first link. Register and read its posting FAQ. You will
> generally be asked to:
>
> 1. Download and execute HiJack This! (HJT) -
>
http://www.trendsecure.com/portal/en-US/th.../HJTInstall.exe
>
> 2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
> wrap"
>
> 3. Download/run Deckard's System Scanner -
>
http://www.techsupportforum.com/sectools/Deckard/dss.exe
>
> 4. Save the scan results (Main.txt and Extra.txt)
>
> 5. And then post the contents of Main.txt and Extra.txt in your post at the
> forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
>
> Standard disclaimer: I can't see and test your computer myself, so these are
> just suggestions based on many years of being a professional computer tech
> suggestions based on what you've written. You should not take my
> suggestions as a definitive diagnosis. If you can't do the work yourself
> (and there is no shame in admitting this isn't your cup of tea), take the
> machine to a professional computer repair shop (not your local equivalent
> of BigComputerStore/GeekSquad). Please be aware that not all local shops
> are skilled at removing malware and even if they are, your computer may be
> so infested that Windows will need to be clean-installed. If possible, have
> all your data backed up before you take the machine into a shop.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
>
www.elephantboycomputers.com
> Don't Panic!
>