:x? ?

The Fsecure version 5.40 identified the following? infected files (win2000NT)? networked
It was unable to disinfect or delete these files..

? C:\WINNT\system32\in10b6s.dll Infection: Trojan-Dropper.Win32.Small.tz
? C:\WINNT\system32\in10b6s.dlltmp Infection: Trojan-Dropper.Win32.Small.tz
? C:\WINNT\system32\MB.dll Infection: Trojan-Dropper.Win32.Small.so
? C:\WINNT\system32\saie321.dll Infection: Trojan-Dropper.Win32.Small.nj
? C:\WINNT\system32\saie321.dlltmp Infection: Trojan-Dropper.Win32.Small.nj

Please help before I'm fired..lol? ? ?

Hey Jim
Try this, not too sure if it works 100%

Unregister DLLs:

Unregister these DLLs with Regsvr32, then reboot:
mydailyhoroscope17307.dll

Remove Files:

Remove these files (if present) with Windows Explorer:
mydailyhoroscope17307.dll

Also might be worth downloading AVG and trying to scan it with that.
http://www.pcworld.com/downloads/fil...RSS,RSS,00.asp

Have you tried booting your machine into SafeMode and running the viruscan from there, this normally fixes the problem when anti-virus stuff cant "disinfect or delete files"

Also might be worth posting your HiJack list for us to check.

Unfortunately ... in safe mode I have no access to the Fsecure program.. But I tried renaming a tmp folder and putting the files in there.. but no luck..can't move files .. or rename them.

Hi Jim.

I have had the.dropper "trojan" in the past and I got rid of it by running Ad-Aware. It's usually associated with mp3 sites.

:-o? ?I ran Ad-Aware SE today.. even in safe mode.. but it never deletes the files... it says they are quarentined...but fsecure still locates them..very stubborn.. after reboot they are still there..?

:oops:

Could you post a HijackThis list, will make it easier to see the problem

Otherwise
Try boot into safemode again, this time open the registry. (START --- RUN --- and type regedit)

Look in the following folder
HKEY_LOCAL_MACHINE --> SOFTWARE --> MICROSOFT --> WINDOWS --> CURRENTVERSION--> RUN

Look for anything strange e.g. anything with these names:

• saie321
• in10b6s
• mb

Also run a search for these files:

? C:\WINNT\system32\in10b6s.dll
? C:\WINNT\system32\MB.dll
? C:\WINNT\system32\saie321.dll

Delete the files once found. (Windows doesn't need them)

Could be worth checking this website out:

http://www.easydesksoftware.com/news/news25.htm