Share this topic on AskShare this topic on Del.icio.usShare this topic on DiggShare this topic on FacebookShare this topic on GoogleShare this topic on LiveShare this topic on MagnoliaShare this topic on MySpaceShare this topic on RedditShare this topic on SlashdotShare this topic on StumbleUponShare this topic on TechnoratiShare this topic on TwitterShare this topic on YahooShare this topic on Google buzz

Author Topic: Strange Startup Item (reposted)  (Read 182 times)

0 Members and 1 Guest are viewing this topic.

Offline Manerd

  • New Member
  • *
  • Posts: 2
Strange Startup Item (reposted)
« on: November 05, 2009, 06:59:15 PM »
I'm making a new posting as suggested as I still have not found a solution to my very old problem.

I have an item in my startup (Windows XP Pro) C:\windows\ogogurin.dll named:Hwiyolifasufolif.
I cannot delete or get rid of this as it always comes back after rebooting.
Every time I scan with Malwarebytes or Spybot it finds this registry value:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Hwiyolifasufolif
and says it is Virtumonde.prx a TrojanC. I click fix problem, it deletes it, and it reappears next time I boot.
Does anybody have a clue on how to get rid of this?

Offline gUiTaR_mIkE

  • New Member
  • *
  • Posts: 23
  • I hope to be more help than a hinderance!
Re: Strange Startup Item (reposted)
« Reply #1 on: November 05, 2009, 08:55:28 PM »
Sounds bad - if what you have is Vundo!

I would start here - http://en.wikipedia.org/wiki/Vundo

You should search for solutions using all variants of the trojan name - Virtumonde / Virtumondo / MS Juan

Online Black Viper

  • Administrator
  • ******
  • Posts: 2265
  • "Have you tweaked your OS lately?"
    • Black Viper's Web Site
Re: Strange Startup Item (reposted)
« Reply #2 on: November 06, 2009, 02:26:13 AM »
Please do not post the same issue again.

BV EDIT: if it is the same issue, your same post, post in the same thread. I ask for different topics for unrelated issues. This cuts down on my administrator duties. I thank you for understanding.
« Last Edit: November 06, 2009, 02:29:25 AM by Black Viper »