well, hi there

not a total idiot, but everything i know, i taught myself. whether it be through trial and error or surfing for answers. malware has taught me more that i ever thought i wanted to know about puters.

not complaining actually. only time i ever got really stressed was when i was taking classes online and i crashed my machine.

i've been dealing with a problem for about a month now. this will be the third forum i'm coming to for help. the first one being AVG and they really only deal with anything that has to do directly with AVG so that probably doesn't count.

i'll post a hjt log later in the proper forum just going to give you a basic idea of what's been going on. i've done several things already: hjt logs - had to change the hjt.exe file name for it to actually pick up the rootkit; malwarebyte's anti-malware fscan and fix; combofix scan and fix; and the assorted spybot search & destroy, adaware, and AVG scans along with ccleaner's "carp**" scans and registry scans. trouble is, it was still acting strange so i have been hesitant about installing ms' sp3 updates because i remember what happened when i installed sp2 on a somewhat dirty machine. didn't really feel like going through all that again.

anyway, it had been determined that i had a variation of the vundo rootkit. thought it was gone, then today in the system32 folder i came across 5 .dll files that had random .dll names, which, when i scanned online at VX Heavens all came back with this information:
File size 107520, MD5 hash 4f988a6dda9901af5ff06dcf420f580e infected Trojan.Win32.Monder.men

each one was exactly the same. i deleted them, which i wasn't able to do before so i thought they may have at least been disabled; however, they had also been gone from the folder at one time. so something is still generating them.

anyway, i don't expect a reply to the issue here. as i said, i will post later in the proper forum for help. this was more by way of an introduction as to why i came to this forum. don't look for the post until later today or tonight because i'm heading to bed right now. been working on this most of the night so i want to put it to rest for now.

i look forward to working with you, hanging out on the forum, and learning even more about the inner workings of my puter

catch you later

Cat-a-lyst,

Glad to see you here and Yes your own idea of posting a HJT log is the correct idea at this point in time is a good one.

I guess you have realised that the HJT Forum is very busy, in fact snowed under so please be patient.

Have you ever thought of joining The Classroom and learning to be a Malware fighter yourself. It is not a wise move to be using software programs to clean your system without proper supervision.

After you post your log, if you have had no reply within 5 days, please go here and post a gentle reminder.

Enjoy the forum as while you wait there is lots to read and learn.

kind regards,

Cat-a-lyst,

Glad to see you here and Yes your own idea of posting a HJT log is the correct idea at this point in time is a good one.

I guess you have realised that the HJT Forum is very busy, in fact snowed under so please be patient.

i sort of assumed that. i know, i know, not supposed to assume anythng, but i think in this case it's a safe bet.

Have you ever thought of joining The Classroom and learning to be a Malware fighter yourself. It is not a wise move to be using software programs to clean your system without proper supervision.

i had thought about it but was worried that i didn't have enough tech knowledge to be of much use. and yeah, i know…that's how i crashed my machine a couple years ago. i've been a lot more careful lately and stay away from messing with the registry if i'm uncertain. make sure to back up the registry as well. with this blasted thing i honestly needed help and i did get some but after being clued in on malwarebyte's antimalware program, i didn't hear much back. i'm sure they thought it was fixed. nothing was picking up any issues but you know how you get to know your puter… i know there's still something wrong. then when i saw those .dll files i became concerned again. they have to be coming from somewhere because they were gone at one time.

After you post your log, if you have had no reply within 5 days, please go here and post a gentle reminder.

Enjoy the forum as while you wait there is lots to read and learn.

kind regards,

thanks for the welcome. i know i'm going to have fun exploring. lots of cool stuff here

Cat-a-lyst,

had thought about it but was worried that i didn't have enough tech knowledge to be of much use. and yeah, i know…

You only have to have the very basic knowledge of a computer to apply to the Classroom for admission. Of course you will be taken on your application content, so you can certainly apply if you like.

The sooner you post your HJT log the sooner it will be looked into. If you post it, do not answer it yourself as the Malware experts look for logs unanswered.

Good luck and I will watch for your log to be posted.

kind regards,