Iamfamous.dll help

Status
Not open for further replies.
I've recently gotten the Trojan, or virus, or whatever it is, called iamfamous.dll. It messes with my internet searches and keeps firefox from working. I looked up some info on it online and ran a hijackthis scan and saved the log. I renamed hijack this to crusty.exe because I read it somewhere on these forums. I'll attatch the log. Can anyone help? Im afraid to sign onto anything important while I have this.

Thanks in advance.
 
  • Following the Guide: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions creates a common beginning for an initial assessment.

  • Seeing is believing - complaining of Iamfamous -
    • Without supporting logs, anything caught by HJT is used to suggest changes.
    • However, the MBAM and/or SAS logs will improve diagnosis of this thrreat.
      • Run this pair until clean or until it uncovers something that won't clear
    • Scan with HJT. Tick & Fix. Restart the computer.
    Code:
    O2 - BHO: (no name) - {22E7D6EF-681D-4CB3-A70E-078225334A5E} - C:\WINDOWS\system32\fccyvTLE.dll
    O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
    O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\tuvUOiGv.dll
    O2 - BHO: (no name) - {C196028F-FF10-47FB-8475-E10417790A72} - (no file)
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    
    O17 - HKLM\System\CCS\Services\Tcpip\..\{39C1C150-42E6-4DCC-9571-ABB95CEBA1CA}: NameServer = 85.255.112.37,85.255.112.38
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.37,85.255.112.38
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.37,85.255.112.38
    
    O20 - AppInit_DLLs: iwewqg.dll
    O20 - Winlogon Notify: tuvUOiGv - C:\WINDOWS\SYSTEM32\tuvUOiGv.dll
Delete files - if present - from the list inside code box


Post new logs if problems are still present.

Additional Information - Malware Removal sites not reachable
See this post
 
Status
Not open for further replies.
Back