Npaijcx.dll

[zeitghost]

Hidden.

Lives in C:\windows\system32\

del c:\windows\system32\npaicjx.dll /ah

gives Access Denied.

In safe mode.

Wot do I do next?

(Other than call the helpdesk).

[eek]

Back everything up and prepare for a fresh install as that's a trojan.

[Zippy]

Can you move or rename it?

[zeitghost]

Nope.

Can't delete it or change attributes or anything else.

Fecked & not in a good way from the sound of it.

Ho hum.

[zeitghost]

You got some reference to this?

I can't find anything anywhere that tells me wtf it is.

[Zippy]

You got some reference to this?

I can't find anything anywhere that tells me wtf it is.

No I haven't. Couldn't find it anywhere. Was just thinking about generic shit:ty dlls wot get themselves installed.

[zeitghost]

AVG does bugger all even in safe mode.

EEK, have you got any ideas?

I was thinking of installing the disk as a slave & scanning it from another machine.

Or is that too simplistic?

[PAH]

Putting the drive as a slave in another PC may work, if the file is being locked during boot up.

I remember having to sort something like this out some years ago. I think the solution I found was to use a utility that does a 'move on boot' so the file is not locked and can be deleted after startup.

[Sysman]

If you trust HellDesk, let 'em at it.

If not, or it's your own machine, get a Linux Live CD (a bootable one) that supports NTFS and try deleting the file with that.

I've found the Linux Mint Live CD has the goodies to do this sort of stuff.

[PAH]

AVG does bugger all even in safe mode.

I'd also recommend trying something other than AVG to check your system is clean after managing to delete the dodgy dll. It could be that the real nasty on your system just keeps recreating the dll.

For free tools I ditched AVG some time ago in favour of Microsoft's Security Essentials. It seems to catch most problems before they have chance to get a hold of the system, when doing real time protection. Its library also usually gets updated several times per week as Windows Update is always pestering me to do an update for it.