I think I found a virus on my PC:
Windows Vista Business
32 bit
Service Pack 2
I tried running various scan with Kaspersky, Avast, TrenMicro HouseCall and other anti-virus programs, but none of them report
any infection.
The problem seems related to a file:
bjerde.dll
located in:
C:\Users<user>\AppData\Local
which reports itself as:
Cyberlink PowerDVD software
a software which I never installed on my PC.
If I remove the file after some short time ir reappears, probably because I found in the registry (HKCU:Run)
the value:
rundll32.exe “C:\Users<user>\AppData\Local\bjerde.dll”,Startup
which has the value:
Ytecupiyepeteroq
as program name.
A search on the web for the dll name or the program name produces no results.
The DLL seems also to create exe files in:
C:\Users<user>\AppData\Local\Temp
which periodically ask for user account verification to be ran (sorry but I deleted those file without recording the names).
I was able to reboot the PC in Linux and remove the file (bjerde.dll) so that is not executed anymore,
but I do not really know if my PC is safe any more!
Has anybody any information on that DLL?
Thank you very much.