System Startup System.ini questionable file

[Infected]

Hi guys. I have a system start-up file that is displayed on Spybot S&D and I can't find anything about it. The thing is, i just cleared a nasty virus off my system, and I'm perhaps, extra paranoid.

Located: System.ini, awtrRKbx (DISABLED)
command: awtrRKbx.dll
file: awtrRKbx.dll

I couldn't find anything on awtrRKbx online. I am running Windows XP Professional (version 2002) SP3. there are actually two instances of this listed on the System Start-Up tab. I disabled both but one keeps re-enabling itself for system start-up.

I have a tool called "the Unlocker" I don't know who makes it, but it basically displays all programs using a file so you can use the tool to deactivate those programs in order to delete the file. For this .dll (which is in my System32 file) it shows it is using 1 instance of Explorer.exe and 2 instances of winlogon.exe. So obviously (as i have tried) attempting to disable those operations in order to move the file to a quarantine (as a temporary solution) have only caused my computer to reboot.

I would appreciate if you could use your ultra guru-ness to tell me what the :lip: awtrRKbx.dll is.

Keep up the awesome work.
Hit up my email if you want

[Shaba]

Hi Infected

Click here (http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe) to download HJTInstall.exe
Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.