Search:

:oops: I owe you guys an apology the .dlls were there after all but in Folder 'Notify Disabled' just under 'Notify' (Durr).

Suffice to say I reinstalled Spybot to check the registry edit had...

Look in the subkeys of following registry key for DLLName:

* HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

Note: WRLogonNTF.dll is used by Webroot Spy...

I am not refusing or dismissing anything, what I am aiming at is a quick response as to why spybot is STILL showing 6 system.ini files that no longer exist, my HJT log is clean, my pc is clean,...

My HJT log is clean that is why I am asking why are the .dlls still showing in Spybot 'Tools' 'System Start Up' even though the Trojan Lop.AH .exe program and the .dlls it produced have been killed?...

Have they never come back? I have found they are something to do with Adobe and will always come back when adobe is on your system, they are totally safe I believe.

Clarification from Spybot would...

Thank you,
I can see no active processes anywhere, ms process explorer show non of these .dlls it did when the lop.AH pop up warning was happening but now it all seems gone except the .dlls are...

Found the above, any ideas fix or ignore?

What are they?

Thank you

Bump again :-)

Bump anyone?

Hi Sandra,

Thanks for replying, perhaps I haven't expained myself very well.

I have already removed the .exe that was reproducing the .dlls and deleted the .dlls off my system and the virus no...

Hi, I have the remnants of some dodgy .dlls in system start up that were associated with a virtumonde virus I had a while ago, they are still there in bold despite seemingly being cleaned off...

I am thinking this is the sucker, if so would deleting it in regedit stop it reloading?

I really hope this is the fix and appreciate any assistance to kill this parasite once and for all, sooner...

I have added this on a separate reply to avoid possible confusion, this is a copy of the system start up log showing disabled files of the malware virus I have tried to kill, again this is offline as...

HJT After killing-fixing the 02 BHO System32 awtqqro.dll & Winlogon.exe awtqqro, It looks clean to me, am I missing something?
As stated this is scanned after the files are killed/fixed whilst...

I have tried to kill the thread in system internal as advised, but it keeps coming back as another random seven letter file ie. awtqqro.dll fccdyy.dll etc these are only two of five that are disabled...