Nass,
Thank you so much for your help, i will try it.
What is Hijackthis and what do i need it for?
--
Dawn
:
:
Good Afternoon,
I received an error message at startup and I am not sure what it
means....
c:windows\system32\jojim\sv.dll
If anyone knows what this means can you please help me?
Thank you,
--
Dawn
Your machine infected with Virtumonde/Zlob/Vundo variant and you need
to run
a thorough scan for both malware and viruses.
Read this but Note the location which yours not the same!
http://www.processlibrary.com/directory/files/alerts.supportassemblies.alertfunctions.sv/421154
<Q>
alerts.supportassemblies.alertfunctions.sv.dll is a
Alerts.SupportAssemblies.AlertFunctions.Sv.dll belonging to HP WebJet
from
Hewlett-Packard Company
</Q>
An update is available for the Windows Server 2003 Service Pack 2
Multilingual User Interface Pack
Microsoft.managementconsole.resources.sv.dll
5.2.3790.2560 16,384 23-Oct-2006 08:31 x86 SP2
http://support.microsoft.com/kb/925148
Run a thorough scan by doing the following steps:
1... First, try to clean up your caches, Internet files and delete
cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing
Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this
box.
Then click on Programs Tab and click Manage Add-Ons and Disable all
non
Verified Add-Ons (You should Renable them later one-by-one and see
the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:
Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run =
look in
the right pane/window and remove the entry for it
"c:\Windows\system32\jojim\sv.dll "
Download Hijackthis.
(
http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
The entry in Hijackthis will look like this:
O4 - HKLM\..\Run: [ewgmfxd.dll]
c:windows\system32\jojim\sv.dll,rundll32.exe
c:windows\system32\jojim\sv.dll,...etc
Run disk clean up on your Drive.
HTH,
nass