Missing dll files in Temp folder

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Windows XP SP2 - 1 user account and 1 admin account

The user account was infected on 2 April, probably with virtumonde.
Between Norton and SpyBot it seems to have been fixed. In the course
of working the problem, I manually deleted numerous files from various
temporary folders, especially exe and dll files modified at the time
of infection.

Now when I log on to that account, I get three small pop-up windows
alerting me that files
C:\Docume~1\Barry\LOCALS~1\Temp\hgGyWOFu.dll
C:\Docume~1\Barry\LOCALS~1\Temp\Yjgldenv.dll
C:\Docume~1\Barry\LOCALS~1\Temp\awtutUNh.dll
could not be found. I assume no real system file is ever stored in a
user's temporary folder.

Everything seems to work after acknowledging the alerts so I'm hoping
these files were part of the virus. I assume the alerts are the
result of some residual crap in the registry.

Can someone tell me how to get rid of the alerts?


Remove del for email
.



Relevant Pages

  • Re: Anti Virus, now Anti Spy-ware
    ... On Wed, June 18, 2008 10:51 am, Steve Lamb wrote: ... One simply need a different user account, elevate to root, ... remove the infection. ... Ubuntu's policy of a non-functional root password. ...
    (Ubuntu)
  • Re: Anti Virus, now Anti Spy-ware
    ... But this is hardly an issue compared to having system privileges. ... If one's user space is infected one doesn't need to reinstall ... to reinstall the OS if only a user account is compromised. ... division between user and system privileges any such infection is ...
    (Ubuntu)
  • Re: Adware / spyware
    ... I keep getting alerts that the computer ... I recommend downloading and running HijackThis: ... specific infection. ...
    (microsoft.public.windowsxp.general)
  • Re: Alerts when web content changes
    ... Thanks a lot Mike. ... In the moment that I change the user account I receive the all alerts ... >>> Mike Walsh, Helsinki, Finland ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: wss alerts not working
    ... Service account the SP timer is using a domain account. ... mean that sometime you get alerts and others you don't? ... Timer Service which must run under the same user account that runs the the ... If you decide to install it, make sure you run the configuration wizard ...
    (microsoft.public.windows.server.sbs)