From: "Gerry Atrick" <GerryAtrick@no-email.com>

| (What's This) ngb4feldepg.dll
| It was in my Windows/System dir.
|
| Searching Google brought ZERO results.
| A piece pf software taht I use, cound not identify it.
|
| A hex editor found this URL inside of it.
| yupsearch.com
|
| I went there, the site nothing but another page where you can click on
| every imaginable spam category along with a type in search.
|
| I do not have any spyware, viruses, or trojans at the moment, but have
| let Adaware remove a few in the past. I assume this is some
| leftovers...
|
| But no references on Google, makes me wonder if this is something
| unique. Generally there is a reference to every .DLL in existance.
|
| I did delete it, but have a backup on a floppy
|
| It's 6,144 bytes
|
| If anyone wants to look at it, I'll rename it to .DL_ and upload it to
| alt.test.
| Just ask me if you do.
|
| Gerry

Please submit 'ngb4feldepg.dll' to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against several different AV vendor's scanners.

Another way to submit is to send the suspect file to the following email address
scan<at>virustotal.com
{ replace <at> with @ } with only the word SCAN as the subject.

Please post back the EXACT results.


Do NOT upload to alt.test -- That is not a bianry News Group there for you should not post
attachments.

A *better* place to post the sample is; alt.binaries.comp.virus

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm