Thanks. And the Rkill didnt detect anything, so I should be good.
---EDIT---
Found Jxolosulo in HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Run. Jxolosulo is a REG_SZ. In there it says rundll32.exe "C:/WINDOWS/ifuyaxukowomaq.dll ",Star...
Ok. I have no idea where star leads to. It wont tell. It shows the "..." in the other values but not this. and all of them start with c:/... but not this one. Also the value name should be ifuyaxukowomaq.dll not Jxolosulo. I can just disable it and delete it now I see where it is. But when i disable it, windows gives me an error and windows boots in custom instead of regular. Also when i searched ifuyaxukowomaq.dll but I searched Jxolosuv and got this site : www.exterminate-it.com/malpedia/regvals/vundo-virtumondo/84. Norton says the site is ok. I went there it has a thing were I can fix comp(which is most likely fake) but what intrests me is that it gives fake dll etc on the site that i can use their program to fix. (Which i wont). But i used "find" and cant find my fake dll. Perhaps someone can find it for me, but theres over 9000 pages of them. Im just curious. Calling all comp nerds to find out wtf this is. Srry 4 grammer etc i was going fast. Tell me so i can clear my paragraph.
---EDIT---
Star...=Starup. And thats the end of the value.
Reply With Quote
Bookmarks