Whats this? A new evil? services.exe, services.dll, el.dll, sent.dll.

[heartdoc]

Hi, I think I have been infected with a new evil. It is not dected by any antivirus software or by Spybot. My sister inlaw was visiting for the holidays and got spammed with a MSN messenger link that she clicked on that was detected as a virus. Then my computer started running funny. After further exploration, I found two "services" entries running, and one was using 98-99% on my CPU. Using Process Explorer I found the following files in "C:\WINDOWS\system32\service" services.exe, services.dll, el.dll, sent.dll. I couldn't delete them because access was denied. So I killed the resources hogging "services" with Process Explorer then I could delete the files. I zipped all four into an archive. What I want to know is what was this thing doing. Does anybody know what this is?

I'll email you the archive if you tell me were to send it. It's too big to attach in this forum.

Thanks,
mike

[tashi]

Hello.
Please send the files zipped to:
detections AT spybot.info
Replace AT with @ and remove spaces.

Then go here and follow instructions.
Before you post a log (http://forums.spybot.info/showthread.php?t=288)

Start a topic here:
Malware Forum (http://forums.spybot.info/forumdisplay.php?f=22[/url)

Someone will take a look at the system as soon as available to do so.

Cheers.