Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Spyware, Viruses, etc. (https://www.askmehelpdesk.com/forumdisplay.php?f=477)
-   -   Undeletable dll file appears after a recent virus attack (https://www.askmehelpdesk.com/showthread.php?t=241476)

  • Jul 25, 2008, 05:38 AM
    mdv921
    Undeletable dll file appears after a recent virus attack
    I recently had a serious virus attack on my XP system. I seem to have gotten that taken care of but I now notice a new dll file listed in my startup programs listing in "msconfig" that is unidentifiable and undeletable. I also can find no information on the net about this dll file. It is named "xtiofcik.dll". The only other information I can with any other utilities program I have is that it is associated with "BMc3563a9a" "unknown manufacturer" and the trustworthiness is listed as "unknown".

    Any assistance with this issue will be greatly appreciated!
  • Jul 25, 2008, 07:17 AM
    JBeaucaire
    If you know the location of the file, perhaps booting into Safe Mode would let you delete it.

    When you uncheck it in msconfig, what happens?

    You might need to create an MS-DOS boot floppy disc and then boot from it, then use DOS to navigate the hard drive and delete the offending file.
  • Jul 25, 2008, 12:08 PM
    mdv921
    Thanks for the info Jbeaucaire. I actually took some of your advise from another thread on this forum and downloaded Spybot S&D and found out the file in question is part of the virtumonde trojan. I ran SD&D, rebooted after turning off the modem and then I noticed there were some traces left so I did a little search on getting rid of virtumonde and found out about the vundofix program which I downloaded and ran. That was able to get rid of all the other traces and now the file is deleted and the entry is no longer showing up in the startup list. So I'm hoping I've got it completely repaired but I will keep an eye on it for a few days to make sure it doesn't sneak back in.

    Thanks again for your help.

  • All times are GMT -7. The time now is 12:30 PM.