fccywxvv.dll cannot be deleted.. hmm..

Ryuu · 11-06-2008, 03:50 AM

Today I encountered a virus. I logged on to my computer and then Norton Antivirus gave me a virus alert and said that it has detected a virus on my computer.

Details:
Object Name : C:\WINDOWS\SYSTEM32\fccywxvv.dll
Virus Name : Trojan.Vundo
Action Taken : Unable to repair this file.

When I saw the virus, I was thinking to myself "thankfully I got an antivirus" but when I saw "unable to repair this file", I flared up.

OK never mind, so I decided that I manually delete the file myself. I went into the SYSTEM32 folder and tried to delete the file, but it said access denied.

I Googled my problem and found a useful program, downloaded it and found out fccywxvv.dll was attached to winlogon.exe.

I know that winlogon.exe is a critical system process and will harm your computer if the process is ended. So I was wondering if there is any chance to take off fccywxvv.dll without stopping/deleting/ending winlogon.exe?

Oh yeah, I heard about a certain program called HijackThis.. What is this 'This' huh? Is 'This' referring to my computer? Will it hijack my computer? Oh no.. This is bad.

Ryuu · 11-06-2008, 05:29 AM

Sorry. Nevermind, I found the solution.

For future readers who are reading this and are looking for help, you might want to download Unlocker.

After installing Unlocker, right-click on the file you want to delete and press Unlocker. Then a window will come out, click on Unlock All.

Restart the computer, and you should be done!

tetonbob · 11-06-2008, 08:54 AM

Vundo/Virtumonde does not always go so quietly. Unlocker has it's uses, but often there are other files on the machine waiting to replace those you've found and removed.

Quite possibly relates to the other troubles you're now posting about.

http://www.techsupportforum.com/secu...logon-exe.html

==========================

If you think your computer is infected....

Ryuu · 11-06-2008, 06:34 PM

Then how do you suggest I take it off completely?

tetonbob · 11-06-2008, 06:46 PM

As stated at the top of this forum

Quote:

This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the HijackThis Log Help forum, or the "First Steps" link at the top right of each page.

We don't do malware removal in this section of the forum.

There's also a sticky topic I already linked to

If you think your computer is infected....

Follow the steps, and post the logs in the HijackThis Log Help forum.

Ryuu · 11-06-2008, 06:48 PM

Thanks. I'll post the logs right away.

11-06-2008, 03:50 AM	#1 (permalink)
Ryuu Registered User Join Date: Oct 2008 Posts: 18 OS: WinXP SP2	fccywxvv.dll cannot be deleted.. hmm.. Today I encountered a virus. I logged on to my computer and then Norton Antivirus gave me a virus alert and said that it has detected a virus on my computer. Details: Object Name : C:\WINDOWS\SYSTEM32\fccywxvv.dll Virus Name : Trojan.Vundo Action Taken : Unable to repair this file. When I saw the virus, I was thinking to myself "thankfully I got an antivirus" but when I saw "unable to repair this file", I flared up. OK never mind, so I decided that I manually delete the file myself. I went into the SYSTEM32 folder and tried to delete the file, but it said access denied. I Googled my problem and found a useful program, downloaded it and found out fccywxvv.dll was attached to winlogon.exe. I know that winlogon.exe is a critical system process and will harm your computer if the process is ended. So I was wondering if there is any chance to take off fccywxvv.dll without stopping/deleting/ending winlogon.exe? Oh yeah, I heard about a certain program called HijackThis.. What is this 'This' huh? Is 'This' referring to my computer? Will it hijack my computer? Oh no.. This is bad. Last edited by Ryuu; 11-06-2008 at 03:51 AM.

11-06-2008, 05:29 AM	#2 (permalink)
Ryuu Registered User Join Date: Oct 2008 Posts: 18 OS: WinXP SP2	Re: fccywxvv.dll cannot be deleted.. hmm.. Sorry. Nevermind, I found the solution. For future readers who are reading this and are looking for help, you might want to download Unlocker. After installing Unlocker, right-click on the file you want to delete and press Unlocker. Then a window will come out, click on Unlock All. Restart the computer, and you should be done!

11-06-2008, 08:54 AM	#3 (permalink)
tetonbob Manager, Security Center, TSF Academy; Analyst, Security Team Join Date: Jan 2005 Location: Transylvania County, North Carolina, USA Posts: 35,158 OS: 2000 Pro; XP Pro; XP Home	Re: fccywxvv.dll cannot be deleted.. hmm.. Vundo/Virtumonde does not always go so quietly. Unlocker has it's uses, but often there are other files on the machine waiting to replace those you've found and removed. Quite possibly relates to the other troubles you're now posting about. http://www.techsupportforum.com/secu...logon-exe.html ========================== If you think your computer is infected.... __________________ Practice Safe Surfing PC Safety and Security--What Do I Need? Because what you don't know, CAN hurt you. Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Microsoft MVP - Consumer Security 2009

11-06-2008, 06:34 PM	#4 (permalink)
Ryuu Registered User Join Date: Oct 2008 Posts: 18 OS: WinXP SP2	Re: fccywxvv.dll cannot be deleted.. hmm.. Then how do you suggest I take it off completely?

11-06-2008, 06:48 PM	#6 (permalink)
Ryuu Registered User Join Date: Oct 2008 Posts: 18 OS: WinXP SP2	Re: fccywxvv.dll cannot be deleted.. hmm.. Thanks. I'll post the logs right away.