BMdf35ba7f registry entry won't go away

dpj626

New member
Spybot S&D keeps detecting a change to my registry on startup
Name: BMdf35ba7f
Value: Rundll32.exe "C:\WINNT\system32\shnbwjne.dll",s

I tell Spybot to deny the change and remember this decision. Some process/malware is running (likely the dll above, which I cannot delete, though I did mange to rename it) over and over causing numerous automated messages to appear about spybot denying that entry.

If I delete the key using regedit, it reappears almost instantly. Any ideas?
If I need to go thru the malware procedure, please let me know.
 
Despite my deleting the bad dll, the malware entry came back with the same name and different value Rundll32.exe "C:\WINNT\system32\fdxsxtha.dll",s after a reboot. Spybot cleaned up a lot of malware/adware, including Virtumonde, but this thing will not go away. I have no idea how it is launching or getting onto my PC.
 
Back
Top