Cable Forum - View Single Post

Web-Junkie · 27-05-2010, 20:18

Got a few laptops from where I work and they all have these files in the system32 folder:

Trapkey.dll
InfectDirectx.dll
MaskMessage.dll
Qicksnk.sys
and probably wpa.dbl (but think that's Windows Product Activation but it gets created each logon)

Can't seem to find the cuplrit as the files come back if deleted in DOS mode and can't see anything suspicious in the Registry RUN keys or Startup menu or Task Scheduler!! Task Manager doesn't seem to show anything suspicious either. We run Sophos Anti Virus that gets updated via a server and that's not found anything, so a nasty rootkit or new virus then?

27-05-2010, 20:18	#1
Web-Junkie Inactive Join Date: Aug 2004 Services: 30mb BB Posts: 1,556	Is this a new Virus/Rootkit I have? Got a few laptops from where I work and they all have these files in the system32 folder: Trapkey.dll InfectDirectx.dll MaskMessage.dll Qicksnk.sys and probably wpa.dbl (but think that's Windows Product Activation but it gets created each logon) Can't seem to find the cuplrit as the files come back if deleted in DOS mode and can't see anything suspicious in the Registry RUN keys or Startup menu or Task Scheduler!! Task Manager doesn't seem to show anything suspicious either. We run Sophos Anti Virus that gets updated via a server and that's not found anything, so a nasty rootkit or new virus then?