System 32 ssqopnn.dll threat

[wiztr]

Dear someone,

PLEASE HELP ME!

this threat (System 32 ssqopnn.dll) keeps popping up on my nod32 and when i try to delete it it pops right back up a few seconds later. I even tried to delete it manually and it didn't work. Please help me.

[HiTech_boy]

Hello and welcome to Wilders!

Write down what module finds this as a threat (AMON or IMON) and the path to the file (e.g. C:\Windows\system32\bla-bla-bla.dll)

[TonyKlein]

It's a dll which implements a Vundo aka Virtumonde adware BHO (browser plugin)

There are dedicated tools to deal with this infection, which can be a pain to remove, and by far the best thing to do is post a HijackThis (http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis) log at one of the boards specializing in malware removal so that the analysts can have a look at your configuration.

Here's an excellent one that isn't quite as busy as the "big names": http://www.bleepingcomputer.com/forums/index.php?

[wiztr]

Thanks for your help. here's the info i got from hijack this....

~Log removed.~

[ronjor]

wiztr,

Post your log at the link above your post. We no longer process logs here.

Wilders no longer analyzes hijack logs per this announcement. (http://www.wilderssecurity.com/showthread.php?t=42148)