Hi-ho the derry-o, the virus in the Dell

[Ilovebigcats]

My computer got a Virtumonde trojan. I got it removed with Vundofix.
I had to delete 2 things that were important to my PC.

c:\WINDOWS\system32\lhicwton.dll
and
c:\WINDOWS\system32\tcksljnn.dll

Anywho... Spybot caught the Virtumonde thing but couldn't remove it. After I ran Vundofix it corrected all the issues I was having and I no longer have the Virtumonde problem. HOWEVER, it removed those 2 files?? are they files?? Whatever they are... it pops up everytime that I start my computer that those are missing. I have no idea how to reinstall those.

But now spybot keeps popping up a resident registry change for something. I can't tell if it is Virtumonde trying to get back in or if it is something I should allow that will repair the missing... file thingys.

I denied it but I have been asked 9,543,241 times. I hit remember my answer "deny change" but it keeps trying and popping up. It is remembering my answer but wont stop trying. Should I allow it? It says BMcb83d54d. What the heck is that? I tried googling it but nothing came up.

Me not know what to do. Me sad.

[PastorDaniel]

Sounds like it is recognizing what you did. A registry change happened when you deleted those files. I personally would except it. But then again...I only tinker with my own toys and don't like to break others...so it's your call.

[Alan]

It sounds like it's virtumundo or some other malware trying to reinstall itself. If it is, you computer is not clean. It wouldn't hurt to head over to [url]forums.majorgeeks.com[/url] and go to the malware forum, follow the instructions in the "READ & RUN ME FIRST. Malware Removal Guide" and if you still have problems start a thread there. It may end up taking a few days to clean up, but when you get finished there it will be clean.

[HarmlessDove]

google system32 errors.

[Alan]

You won't find anything on those two files on google. Malware is good at generating random file names to keep you from being able to do that. The new Vundo variant is very sneaky and if you don't pay close attention you'll think it's a valid process. You may see task_mgr.exe running and then see it again as task_mgr .exe, task_mgr.exe is valid but task_mgr .exe is not.