condt32.dll i need help

Viruses and worms
1

i was looking for a error smart activation key to download and avast info me that it was a troja i had it install, to late
and now i cant remove it now my window is up for 5 sec of/off and it freezes up i cant delete it i was trying to doing in safe mode but its the same i need help…please

2

Hi senad,

You have a backdoor trojan, do as advised here:
One or more of the identified infections is a backdoor trojan.

This allows hackers to remotely control your computer, steal critical system information and Download and Execute files

I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the Trojan has been identified and can be killed, because of it’s backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

Read: http://www.dslreports.com/faq/10451

Read: http://www.dslreports.com/faq/10063

  1. Download this tool: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  2. Double click combofix.exe & follow the prompts.
  3. When finished, it shall produce a log for you. Post that log in your next reply.

Note:
Do not mouseclick combofix’s window whilst it’s running. That may cause it to stall

Post back:
Combofix log
New Hijackthis log
Download HijackThis from here: http://www.spychecker.com/download/download_hijackthis.html
Put it onto the desktop, run a scan and save the log txt file, and attach to your next posting.

polonus

3

thx for helping me

4

Hi senad,

Need your hijackthis log file as well, can you attach it to your next posting,

polonus

5

Hi senad,

Possible new rustock version not yet confirmed - see if cfscript removes it

  1. Please open Notepad

    • Click Start , then Run
    • Type notepad .exe in the Run Box.

  2. Now copy/paste the entire content of the codebox below into the Notepad window:



File::
C:\WINDOWS\system32\4fdw.dll
C:\WINDOWS\system32\unifff.dll
C:\WINDOWS\system32\mssrv32.exe

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsServer]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{58cfda4d-cc33-11dc-8ead-003018b031a0}]

  1. Then in the text file go to FILE > SAVE AS and in the dropdown box select SAVE AS TYPE to ALL FILES

  2. Save the above as CFScript.txt

  3. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again. See attached picture.

  4. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:

    • Combofix.txt
    • A new HijackThis log.

polonus