Strange Startup Item

[Manerd]

I have a strange item in my startups that I cannot identify.
This is the name:Hwiyolifasufolif
and this is the Value:rundll32.exe "C:\windows\ogogurin.dll",e

It cannot be turned off & it cannot be deleted as it will always reinsert itself.
I cannot find any information on this.
Does anybody know what this is and how to get rid of it?

Thanks,
Manerd

[couttsj]

I have a strange item in my startups that I cannot identify.
This is the name:Hwiyolifasufolif
and this is the Value:rundll32.exe "C:windowsogogurin.dll",e

It cannot be turned off & it cannot be deleted as it will always reinsert itself.
I cannot find any information on this.
Does anybody know what this is and how to get rid of it?

Thanks,
Manerd

A google search turns up nothing on either name, so the odds are that it is malware. When you say you cannot delete it, what do you mean? Have you tried booting up in safe mode and deleting or renaming the DLL file in the command mode?

[Black Viper]

Random character exe's and dll's are usually indicative of a viri. Scan your system for infection.

[IH8U]

For malware scanners may I suggest Malware Bytes', Vipre Rescue Scanner and Gmer.

[WildcatDan]

As a general rule, if I find an entry that looks like a bunch of random letters, it's probably malware.  I agree, malwarebytes would be a good option to scan with.  Speaking as a old programmer, most of us are, at the very least, descriptive in our names.

[IH8U]

Referencing your new post at http://bbs.blackviper.com/index.php/topic,2251.0.html

If your still having issues with this trojan after running scans I recommend heading over to http://www.bleepingcomputer.com. They specialize in malware removal. While many of us can help you, this forum does not support those types of issues at the depth it sounds like you need.

[couttsj]

Having an active backdoor installed on your computer since May means that there could be all kinds of malware installed on your computer. I would not recommend trying to simply remove it, but rather a complete reinstall.

J.A. Coutts