trojan horse

[rosemary4754]

I hope you can help. My laptop has been operating slowly recently, freezing
ofgten. Even though my virus protection is up to date, I ran an on-line scan
from another virus protection company. Their scan showed I had a trojan
horse is the file "vgraph.dll". Is this a necessary file? Can I just
delete it? I don't know if this is responsible for the problems but when its
acting up, and I open up task manager, the CPU usage is almost 100% with the
highest amount in "iexplore.exe".

Any help would be appreciated, thanks!

 

[Malke]

rosemary4754 wrote:

> I hope you can help.   My laptop has been operating slowly recently,
> freezing ofgten.  Even though my virus protection is up to date, I ran an
> on-line scan from another virus protection company.  Their scan showed I
> had a trojan horse is the file "vgraph.dll".    Is this a necessary file?
>  Can I just delete it?  I don't know if this is responsible for the
> problems but when its acting up, and I open up task manager, the CPU usage
> is almost 100% with the highest amount in "iexplore.exe".

Yes, the vgraph.dll belongs to the malware. "Iexplore.exe" is Internet
Explorer so you've got something unpleasant going on. You certainly can
just delete the vgraph.dll but I have no idea if that will clean up your
computer. I suggest you go through these general malware removal steps:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. You will
generally be asked to:

1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
wrap"

3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!