Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1088 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Repeating Trojans

MJCKanner
I'm having problems with Trojans (I think), and unfortunately our IT guy is out of town, and since we run Sophos Anti-Virus.... I'm continually getting messages about the same 3 dll files in the system32 folder. Dialog boxes are CONSTANTLY popping up in the bottom corner of the screen informing me these dll's "belong to virus/spyware Mal/Generic-A." The dialog box doesn't explicitly say that Sophos is deleting these files, but I can't find them in the directory so I assume that's what's happening. The dll's are delidubu.dll and fufeguho.dll. Any advice on getting rid of these Trojans would be greatly appreciated. I suspect I have some kind of registry problem that keeps recreating them, but with IT out of town I don't want to try to download new software that could potentially interfere with Sophos. Please help!
:1421


This thread was automatically locked due to age.
  • 0

    Also I've run Sophos virus scans about twice a day (this has been a problem for maybe 3 days), doesn't change anything.

    :1422
  • 0

    New dll's:

    in addition to the two mentioned above, also popping up are

    bidepigu.dll (classified as Mal/Generic-L),

    tezepugi.dll (Troj/Virtum-Gen)

    muwilama.dll (alternately Mal/Generic-A and Troj/Virtum-Gen)

    noweripe.dll (alternately Mal/Generic-A and Troj/Virtum-Gen)

    :1423
  • 0

    Do a search on the net for these files, I would expect someone has had the same issue and can direct you to the files that are creating these.

    1) Run a full scan on the pc, then open the SAV and select more, this should give you the detail about what the virus is in, then cleanup.

    2) Virtum-Gen can be tricky to remove, you have to find what files are causing the issues and what files and registry entries have been modified.

    :1438