Tuesday, August 31, 2004

More whores

Okay, I'm breaching my normal thing and addressing my readership (such as it is) in the hope that one of the more technically adept can help me with my trojan problem.

winufv32.exe
winkni32.exe

Any ideas what these are? They're three years old and seem to be part of the system, but they don't carry version information. I cannot find a reference to them on the web at all. I'm thinking, kill them, but I don't want to find they did something vital (anyone remember that hoax email that said "destroy that file" and then you couldn't get your machine to work?). But I think they are masquerading as system files but aren't. Anyone know?

The current things plaguing me are one that I have an ebay screen popup, even when I don't have IE open. It's extremely frustrating when you're editing to have that happen. Another thing is a window telling me I need to clean up my machine. Don't worry, I'm not dumb enough to hit the OK button.

As I write, a popup is giving me "search results for Casinos".

Something tries to read my floppy drive. I presume it's trying to copy itself or something.

***

Okay, so I'm sure they're bad. But I can't delete them. The fucking things can't be deleted in explorer, because they are in use by Windows. I delete them out of the registry, but they put themselves back in. I use HijackThis and Deskanker, but neither eradicates them. Spybot has no idea and AdAware is too busy telling me I have shitloads of cookies.

How the hell do I delete something that doesn't want to be deleted?

***

So, I rebooted in safe mode and killed the fuckers. I think I've killed the elitebar trojan. I don't know whether I will still get the popup ebay/casino/etc dogshite though.

0 Comments:

Post a Comment

<< Home