ljjkllm.dll and awvwx.dll

[Victor Laszlo]

I have these two files that I would like to remove. I haven't had any
luck even though some claim they are part of the adware-virtumundo
spyware. Can anybody tell me how to detach these two files from the
underlying processes that are holding them. If I could detach them
from the underlying processes I may be able to successfully remove
them.

[Buffalo]

"Victor Laszlo" <vlaszlo@worldnet.att.net> wrote in message
news:3k0n04l4dsrqa46mie4b6l5rn892acj6el@4ax.com...
> I have these two files that I would like to remove. I haven't had any
> luck even though some claim they are part of the adware-virtumundo
> spyware. Can anybody tell me how to detach these two files from the
> underlying processes that are holding them. If I could detach them
> from the underlying processes I may be able to successfully remove
> them.
Try dl'ing and installing the free version of SuperAntiSpyware and then
update it.
Run the program and see if it doesn't help get rid of the above problems.
I was impressed enough with it that I bought the paid version.
The free version is as powerful in getting rid of spyware as the paid
version is.
The free version is on-demand only while the paid version can be set to be
active all the time.
Go to the website of the above name (adding .com) and read about it
yourself.
If it doesn't work, just uninstall it as it seems to uninstall very cleanly.
Buffalo

[Victor Laszlo]

Thanks Buffalo, I'll give it a try.

Any idea how I can actually kill a subprocess of a process/I have
determined that ljjkllm and awvwx are actually tied to lsass.exe and
explorer.exe. If I kill these two processes nothing will work. I need
to find a way to free the above files from lsass and explorer. If I
can do that then hopefully I can delete them.

On Sun, 20 Apr 2008 13:25:06 -0600, "Buffalo" <Eric@nada.com.invalid>
wrote:

>
>"Victor Laszlo" <vlaszlo@worldnet.att.net> wrote in message
>news:3k0n04l4dsrqa46mie4b6l5rn892acj6el@4ax.com.. .
>> I have these two files that I would like to remove. I haven't had any
>> luck even though some claim they are part of the adware-virtumundo
>> spyware. Can anybody tell me how to detach these two files from the
>> underlying processes that are holding them. If I could detach them
>> from the underlying processes I may be able to successfully remove
>> them.
>Try dl'ing and installing the free version of SuperAntiSpyware and then
>update it.
>Run the program and see if it doesn't help get rid of the above problems.
>I was impressed enough with it that I bought the paid version.
>The free version is as powerful in getting rid of spyware as the paid
>version is.
>The free version is on-demand only while the paid version can be set to be
>active all the time.
>Go to the website of the above name (adding .com) and read about it
>yourself.
>If it doesn't work, just uninstall it as it seems to uninstall very cleanly.
>Buffalo
>

[Anonymous]

Victor Laszlo wrote:

> Thanks Buffalo, I'll give it a try.
>
> Any idea how I can actually kill a subprocess of a process/I have
> determined that ljjkllm and awvwx are actually tied to lsass.exe and
> explorer.exe. If I kill these two processes nothing will work. I need
> to find a way to free the above files from lsass and explorer. If I
> can do that then hopefully I can delete them.

Boot from removable media.

Welcome to one of the most glaring shortcomings of the monolithic
nature of MS Windows by the way.

[Dustin Cook]

Victor Laszlo <vlaszlo@worldnet.att.net> wrote in
news:fbhn04d6gn6pdghebg7gtgn4pi8s1grqtj@4ax.com:

> Thanks Buffalo, I'll give it a try.
>
> Any idea how I can actually kill a subprocess of a process/I have
> determined that ljjkllm and awvwx are actually tied to lsass.exe and
> explorer.exe. If I kill these two processes nothing will work. I need
> to find a way to free the above files from lsass and explorer. If I
> can do that then hopefully I can delete them.

You seem intent on preserving them... May I ask what your interest in doing
so might be?

You can also try the malware bytes antimalware program.

http://www.malwarebytes.org

--
Regards,
Dustin Cook - http://bughunter.it-mate.co.uk
BugHunter v2.2e AntiMalware Removal Utility

[Max Wachtel]

On 4/20/2008 1:52 PM, Victor Laszlo after much thought,came up with this
jewel:
> I have these two files that I would like to remove. I haven't had any
> luck even though some claim they are part of the adware-virtumundo
> spyware. Can anybody tell me how to detach these two files from the
> underlying processes that are holding them. If I could detach them
> from the underlying processes I may be able to successfully remove
> them.

Go through the removal steps found below.
Start with the windows update link.

max
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Tools http://max.shplink.com/tools.html
Change nomail.afraid.org to gmail.com to reply by email.
I was lost,but now I'm blind.

[Buffalo]

Victor Laszlo wrote:
> Thanks Buffalo, I'll give it a try.
>
> Any idea how I can actually kill a subprocess of a process/I have
> determined that ljjkllm and awvwx are actually tied to lsass.exe and
> explorer.exe. If I kill these two processes nothing will work. I need
> to find a way to free the above files from lsass and explorer. If I
> can do that then hopefully I can delete them.
>
> On Sun, 20 Apr 2008 13:25:06 -0600, "Buffalo" <Eric@nada.com.invalid>
> wrote:

Just thought of something else.
lsass.exe is a legit program (where the l is actually an L)
Isass.exe is a virus (where the l is actually a capital i )
When the isass.exe uses a capital i it looks similar ( Isass.exe )
Do a google search to get more info.
Do a search and see where your problem lsass.exe is actually located.
I believe the legit one should be located in Winnit\System32 (at least in
Win2000)
Do a search for isass.exe and if it is found, it most likely is a bad
virus.