trojan virus windows\system32\mllmj.dll

  • Thread starter Thread starter Guest
  • Start date Start date
From: "qickdraw4350" <[email protected]>

| I ran Norton and it detected this error but will not repair it. What should I
| do?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Did Norton detect an error or did it detect a Trojan ? Which is it ?

If it detected a Trojan then I suggest you either move it to quarantine or delete it.

I also suggest double-checking the system using the following Multi AV Scanning Tool...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
 
Help trojan is back under new name it is in C:\WINDOWS\SYSTEM32\jkhhh.dll how
can I get this out spyware isn't detecting it anymore I downloaded trojan
hunter it does not remove because it has renamed itself, I've turned thr
restore off rebooted and it is still there. Help, idi
--
thank you


qickdraw4350 said:
David,
Thank you I will try this and report post back

David H. Lipman said:
From: "qickdraw4350" <[email protected]>

| I ran Norton and it detected this error but will not repair it. What should I
| do?

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Did Norton detect an error or did it detect a Trojan ? Which is it ?

If it detected a Trojan then I suggest you either move it to quarantine or delete it.

I also suggest double-checking the system using the following Multi AV Scanning Tool...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
Click to expand...
Click to expand...
 
From: "idi" <[email protected]>

| Help trojan is back under new name it is in C:\WINDOWS\SYSTEM32\jkhhh.dll how
| can I get this out spyware isn't detecting it anymore I downloaded trojan
| hunter it does not remove because it has renamed itself, I've turned thr
| restore off rebooted and it is still there. Help, idi

The following is a 2 phase solution.

Phase 1
------------
Download Adware-Virtumundo Removal Tool v1.5 --
http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

Information on the Adware-Virtumundo Removal Tool:
http://forums.mcafeehelp.com/viewtopic.php?t=57049


Phase 2
------------

Download WinFixerFix.exe from the URL --
http://www.ik-cs.com/programs/virtools/WinFixerFix.exe

Execute; WinFixerFix.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.
It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.

* * * Please report back your results * * *
 
Hello, just thought you'd like to know I am once again trojan free, thanks to
your advice on the Adware-Virtunmundo Removal Tool from McAfee, thanks so
much for your help I'm glad your there. idi
 
From: "idi" <[email protected]>

| Hello, just thought you'd like to know I am once again trojan free, thanks to
| your advice on the Adware-Virtunmundo Removal Tool from McAfee, thanks so
| much for your help I'm glad your there. idi

Excellent !
I am glad you now have resolution One note though, they Two different tools.

The Adware-Virtunmundo Removal Tool was written by Secured2K who is a cotributor at the
McAfee Forums but it isn't from Mcafee
http://forums.mcafeehelp.com/viewtopic.php?t=57049

The WinFixerFix was written by me but adds the McAfee Command Line Scanner so it may get
other infectors that may be on the PC other than those that are associated
Adware-Virtunmundo, WinFixer 2005 and the Vundo Trojan.

I just wanted to clarify that.

Thanx updating the thread.
 
Sorry for mistake on products I also had the winfixer as well, at any rate I
appreciate you and your work you do on this site once again Thank you, idi
 
Back
Top