[fusoya1]

Since my nephew was on my computer last week (I know - but I didn't authorize him to use it) - Anyway, since he was on the computer last week, I have been receiving a threat message from NOD32, telling me of a possible infiltration. It tells me that "urqrqrs.dll" located at C:\Windows\System32 is a possible variant of the GreekTrojan virus. I have tried repeatedly to remove it using NOD32, and each time, it says that it's gone, but it comes back at every RESTART. I have tried other removal tools, but with little success. I have even tried to remove it through Safe Mode, but about 10 seconds into starting in SAFE MODE, I get the message that I am in SAFE MODE and it asks if I want to stay in SAFE MODE. Each time I say yes, it returns to the Desktop and I don't have enough time to remove the file. Also, in SAFE MODE, I get an Exception Processing Message that says C0000013 Parameters 75b6bf9c 4 75b6bf9c 75b6bf9c and that no disk is there. Also, urqrqrs.dll is located in my Registry under HKEY_CLASSES_ROOT\CLSID\BBB05D9E-0297-404D-A68F-D8F2876B84A6\InprocServer32.
I'm sorry I'm a bit tech unsavvy with this sort of thing, but I am out of options. I think I should actually say I'm not sure what options I have left. Any help you can give me would be greatly appreciated. Thank you in advance.

 

[fusoya1]

OK, so I failed to give you the computer information on my computer. So, here it is.
Microsoft Windows XP Professional Version 2002 w/ Service Pack 2
Computer is an HP Pavilion d4100e
with 1GB RAM, 160 GB Hard Drive, AMD Athlon 64 Processor 3800+
2.39 GHz
I hope that is enough.

 

[justpassingby]

Hi fusoya1 and welcome to TSF !

Please follow the HJT - 5 steps against malware link in my sig, go through the whole 5 steps process and read the instructions carefully. Post your logs in a new thread in the HijackThis section and our security analysts will review them. Be patient as the HijackThis section is very busy and you may have to wait a few days before you get a reply but once an analyst will begin to review your thread you'll get quick feedback.