trojan.win32.monderc.gen manual removal

[robsnow]

VIrus detected but file C:\Windows\System32\nnnlijga.dll cannot be deleted.Thanks in advance.

[ScratchyClaws]

Please fufil the rules and attach the logfiles created at steps 8 (AVZ - virusinfo_syscure.zip), 10 (AVZ - virusinfo_syscheck.zip) and 13 (HJT - hijackthis.log) to the message. There should be 3 logs in general

[Rene-gad]

Go Offline
Switch off:
- Antivirus and and, if you have - Firewall, Tea Timer of Spybot Search & Destroy - if active.
- System Restore
- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{6B96669D-5BDB-4163-9E86-E5138AC6E67A}');
 DelBHO('{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}');
 DelBHO('{185060A5-65B5-4E2B-A5D9-0C568652F6BC}');  
 QuarantineFile('C:\WINDOWS\system32\njfdcweg.dll','');
 QuarantineFile('c:\WINDOWS\system32\mpx.exe','');
 QuarantineFile('C:\WINDOWS\system32\jkkHYqnm.dll','');
 QuarantineFile('C:\WINDOWS\system32\nnnlijGA.dll','');
 DeleteFile('C:\WINDOWS\system32\nnnlijGA.dll');
 DeleteFile('C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL');
 DeleteFile('C:\WINDOWS\system32\jkkHYqnm.dll');
 DeleteFile('C:\WINDOWS\system32\njfdcweg.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the red link on th etop of this page.
- Attach 3 logs to your new post..

[robsnow]

Thanks. Problem resolved.

[Rene-gad]

Thanks. Problem resolved.

Pls. repeat 3 logfiles and upload the quarantine.