New problems, dll files!

Viruses and worms
1

Problem with urjfmyhw.dll,s
And mjbmchkp.dll

The later was deletable but not the first.
Thanks for help!

2

Are you using Windows XP/Vista?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning.
Select for scanning archives.
Boot.
If infected files are found, it’s safer to send them to Chest instead of deleting them.
This way you can further analysis them.

3

First what was the problem ?

Although both of these file names look like randomly generated file names, by Vundo - Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).

  1. SUPERantispyware On-Demand only in free version.
  2. MalwareBytes Anti-Malware freeware version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. Also Try this tool, RogueRemover, available here http://www.malwarebytes.org/rogueremover.php

After running both of the above, run this analysis tool.
Program & Tutorial - Also useful as a diagnostic tool - FileHippo Download - HiJackThis and post the contents of the HJT log file here. - HJT Information HiJackThis Tutorial.

4

Hi,

The swap file is now removed, but after rebooting windows, it has not been recreated…

So what can i do now ? Can i recreate it ?

ps : if i haven’t put the file in quarantine at first, it was because the system didn’t want me to do it telling me i haven’t enough space on the disk which was not the case.

5

Paillade,

Try this with caution:

  1. Right click my computer, select properties
  2. Click the ‘Advanced’ tab
  3. Under performance, click Settings
  4. Click the ‘Advanced’ tab
  5. Click ‘change’ under Virtual memory
  6. Make a note of the existing swap file(s)
  7. Set the current swap file to a very small size (e.g. 2mb)
  8. Restart the PC, and resize the swap file back to its original size Initial Size equal to the 1.5 to 2.0 times your physical RAM (from a comment below!)
  9. Restart the PC once more

polonus