wballstarz

superb, thank you, its allowed me to delete my nigh on 5 thousand .tmp files! lol what are tmp files by the way? thanks alot for the help, ive bookmarked this topic, and will reply if anything else happens, like files coming back, etc etc. thanks again. dan

Razvan Benchea said: please submit the following files: C:\WINDOWS\system32\\jrarbxgu.dll (i'm 90% sure this is a vundo file) C:\WINDOWS\system32\jkhfc.dll C:\WINDOWS\system32\jkkigdd.dll sorry for the long reply time! /applications/core/interface/file/attachment.php?id=19760" data-fileExt='zip'…

try now to delete the tmp files. Also please post here a bd_sys_log info file. (You can create this kind of file using the program you have just downloaded, from SysLog ingo) Well, the tmp files are undeletable. and on top of that, I cant get to my files, my computer, my documets, etc etc, just will not open.…

OK... download the file from this address: http://students.info.uaic.ro/~mihai.benche...BDAspySetup.exe It is a program that we are currently working on. So, download it, install it and then run it. Go to [On Demand], select [Choose file form disk] and browse for the file you want to delete. Below, from the [Choose action…

yes, you can upload only archives (forgot to mention). The file you've sent me is infected with vundo. You have to delete that file. As far as i know vundo injects itself in many processes including winlogon. So the best way to delete that file is using a boot cd. Try it and tell me how it went. what is a boot CD? Can i…

done now i think /uploads/emoticons/default_smile.png"> /applications/core/interface/file/attachment.php?id=19758" data-fileExt='zip' data-fileid='19758'>srtashfb.rar.zip

aha, i had noscript on, something that stops webites. I had to allow birdefender, before i could see the browse button thanks oh...as i write this post.. " Upload failed. You are not permitted to upload this type of file" and i archived it, and it disappeared...not good lol.

how do i submit a file? sorry for noobism!

Hijack this log. Logfile of HijackThis v1.99.1 Scan saved at 14:46:20, on 13/02/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe…