FCCABY.dll / ljggde.dll Removal.

AlonTavor

Distinguished
Oct 20, 2008
2
0
18,510
0
Hello. My second computer has been infected with a "Win32/Kryptik.DOX". My Nod32 keeps blocking the file ljggde.dll (which is located in Windows/System32). Nod32 deletes the file, but the file gets recopied there by something (And Nod32 deletes it again).

I restarted my PC on safemode. deleting some EXE on my temp folder that Nod32 said was infected. Deleted the ljggde.dll/fccaby.dll, Opened up Regedit and searched for ljggde.dll .

"There you are" I said, Seeing it at the "Run" folder. I deleted it... and what the heck? it pops back in with a new name, same values! I quickly opened up task manager, Thinking its somehow managed to run on safemode, didn't see anything suspicious. How the heck can it change my registry on safemode like that?

Nod32 keeps saying I need to reboot to completely remove it (but it doesn't help) .
System restore is turned off.
 

AlonTavor

Distinguished
Oct 20, 2008
2
0
18,510
0
Nod32 is fully updated.

Help me kill this SoB.




ohhhh Look at this. I found ljggde.dll at some "authentication" on the registry... something with passwords and security.
Thank god I shut down my internet.
 
Thread starter Similar threads Forum Replies Date
D Antivirus / Security / Privacy 3
G Antivirus / Security / Privacy 1
barracuda9099 Antivirus / Security / Privacy 1
Q Antivirus / Security / Privacy 1
N Antivirus / Security / Privacy 5
arimich Antivirus / Security / Privacy 1
aafusc2988 Antivirus / Security / Privacy 11
B Antivirus / Security / Privacy 3
M Antivirus / Security / Privacy 1
A Antivirus / Security / Privacy 2
K Antivirus / Security / Privacy 8
J Antivirus / Security / Privacy 4
kikani.kautik Antivirus / Security / Privacy 13
D Antivirus / Security / Privacy 6
D Antivirus / Security / Privacy 2
E Antivirus / Security / Privacy 2
C Antivirus / Security / Privacy 1
M Antivirus / Security / Privacy 4
A Antivirus / Security / Privacy 1
K Antivirus / Security / Privacy 2

ASK THE COMMUNITY