Wilders Security Forums  

Go Back   Wilders Security Forums > Other Security Topics > malware problems & news
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old September 3rd, 2006, 04:38 PM
solodude23 solodude23 is offline
Infrequent Poster
 
Join Date: Sep 2006
Posts: 3
Default Help! ntsqrl32.dll and ntcvx32.dll infected!

Origonally AVG popped up with an Alert saying file 'C:\WINDOWS2\system32\ntsqrl32.dll' was infected. I healed it "successfully." Next, another came up saying 'C:\WINDOWS2\system32\ntcvx32.dll' was infected, and I healed it "successfully" as well. However, since those origonal ones AVG has popped up 23 more times saying those files were infected, and every time I heal them successfully (according to AVG).

The image below shows AVG's virus vault..showing the last 23 of the times it says those files are infected. It dosn't show the origonal ones though. I removed the record of those in the virus vault after I thought they were taken care of.

http://img322.imageshack.us/img322/5919/untitledkg9.jpg

What do I do?
  #2  
Old September 4th, 2006, 01:47 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,947
Default Re: Help! ntsqrl32.dll and ntcvx32.dll infected!

By far the best thing to do is post a HijackThis log at one of the boards specializing in malware removal so that the experts can have a look at what's running.

Here's an excellent one that isn't quite as busy as the "big names": http://www.bleepingcomputer.com/forums/index.php?

Best regards,
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #3  
Old September 10th, 2006, 03:17 AM
solodude23 solodude23 is offline
Infrequent Poster
 
Join Date: Sep 2006
Posts: 3
Default Re: Help! ntsqrl32.dll and ntcvx32.dll infected!

Thanks! Took a while but here it is. Also, looked up vssms32.exe before I even scanned. Its no good, but not sure if thats all I should remove.

~Hijack Log removed - Ron~

Last edited by ronjor : September 11th, 2006 at 06:24 PM.
  #4  
Old September 10th, 2006, 03:22 AM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,947
Default Re: Help! ntsqrl32.dll and ntcvx32.dll infected!

I'm afraid this board no longer'does' malware removal, which is why I suggested you post at http://www.bleepingcomputer.com/forums/index.php? instead
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #5  
Old September 11th, 2006, 06:14 PM
solodude23 solodude23 is offline
Infrequent Poster
 
Join Date: Sep 2006
Posts: 3
Default Re: Help! ntsqrl32.dll and ntcvx32.dll infected!

Oops sorry about that.
 

Wilders Security Forums > Other Security Topics > malware problems & news « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 08:22 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums