hojubipa.dll

2010-03-25 22:47:50 67072 --sha-w- c:\windows\system32\hojubipa.dll 2010-03-27 10:48:39 96768 --sha-w- c:\windows\system32\hugewejo.dll 1601-01-01 00:03:28 100352 --sha-w- c:\windows\system32\jafutoja.dl. \WINDOWS\system32\hojubipa.dll (Trojan.Vundo) -> Quarantined and deleted successfully Back to top #28 SpySentinel SpySentinel Forum Deity Experts; 1848 posts Gender: Male; Location: The United States; Interests: Fighting/Analyzing Malware & Social Media. \WINDOWS\system32\hojubipa.dll [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '49ab9cf9.qua'! C:\WINDOWS\system32\jinuriwa.dll [DETECTION] Is the TR/Crypt.XPACK.Gen Troja.O20 - AppInit_DLLs: c:\windows\system32\vawerepu.dll c:\windows\system32\hojubipa.dll O21 - SSODL: WPDShServiceObj - b{aaa288ba-9a4c-45b0-95d7-94d524869db5} - (no file) O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\hojubipa.dl. hojubipa.dll kutosiva.dll duredidi.dll bemetanu.dll hepoyaba.dll dekoyemu.dll sufohuwe.dll yosohede.dll norefose.dll gapihovi.dll defohesi.dll mofomugo.dll teputedu.dll giponutu.dll yojakagu.dll bemuwafe.dll jahiyaso.dll tegawula.dll bevefime.dl. BHO: (no name) - {3f4eb2eb-2e5b-49d8-9c97-2d3f2973baf6} - C:\WINDOWS\system32\hojubipa.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C.2009-03-09 11:12 142,848 a--sh--- c:\windows\system32\hojubipa.dll 2009-03-09 11:12 107,520 a--sh--- c:\windows\system32\zuyisuro.dll 2009-03-09 11:12 101,376 ----- c:\windows\system32\layepezo.dll 2009-03-08 23:11 101,376 ----- c:\windows\system32\fikolete.dl. Virus/Trojan No 0 Yes No c:\qoobox\quarantine\c\windows\system32\hojubipa.dll.vir 03074964 Trj/CI.A Virus/Trojan No 0 Yes No c: \qoobox\quarantine\c\windows\system32\liwifina.dll.vir 03074964 Trj/CI.A Virus. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] CPM87eaf516 = Rundll32.exe [%SYSTEM%]\hojubipa.dll,a [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] woyenafova = Rundll32.exe [%SYSTEM%]\kojofaba.dll,.so that hojubipa.dll runs every time a Windows application starts [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa] Notification Packages = 73 63 65 63 6C 69 00 43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 6D 33 32 5C 68 6F 6A 75 62 69 70 61 2E 64 6C 6C 0. Try Google or Bing. %System%\hojubipa.dll %System%\regisifo.dll: Note: %System% is a variable that refers to the System folder By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).