the last few days whenever i click on a link in GoogleChrome i get redirected to
shopsales4yous. sometimes its only one time then it will go through but its gone 10+ times b4 going to the site im trying to go to. the other thing is in my startup programs somthing called Norton Ghost(i dont have anything from norton installed nor have i installed anything with it) that runs from rundll32.exe "C\users\admin\appdata\local\temp\fccawx.dll", s and another called Foobar2000 from rundll32.exe "C\users\admin\appdata\local\temp\rqoljh.dll", s. the foobar2000 just showed up today but the Norton Ghost always has a check next to it everytime i start up my laptop even if i uncheck it and press apply. and twice (right now is the 2nd) im gettn repeated popups of RunDLL Error loading
C\users\admin\appdata\local\temp\rqoljh.dll Access is denied. i dont know what to do. any help is appreciated
{Edit} ok i found some of the DLL problem in a hiden folder with Microsoft Security Center and removed them but some are still there. i just scanned one with VirusTotal. here is the link(idk if it works or not but am posting the results also)
Antivirus Version Last Update Result
AhnLab-V3 2010.10.20.02 2010.10.20 Trojan/Win32.CSon
AntiVir 7.10.12.252 2010.10.19 -
Antiy-AVL 2.0.3.7 2010.10.20 -
Authentium 5.2.0.5 2010.10.20 -
Avast 4.8.1351.0 2010.10.19 -
Avast5 5.0.594.0 2010.10.19 -
AVG 9.0.0.851 2010.10.20 -
BitDefender 7.2 2010.10.20 Gen:Variant.Kazy.1916
CAT-QuickHeal 11.00 2010.10.20 -
ClamAV 0.96.2.0-git 2010.10.20 -
Comodo 6446 2010.10.20 -
DrWeb 5.0.2.03300 2010.10.20 -
Emsisoft 5.0.0.50 2010.10.20 Trojan-Dropper.Win32.Vundo!IK
eSafe 7.0.17.0 2010.10.19 -
eTrust-Vet 36.1.7921 2010.10.19 -
F-Prot 4.6.2.117 2010.10.19 -
F-Secure 9.0.16160.0 2010.10.20 Gen:Variant.Kazy.1916
Fortinet 4.2.249.0 2010.10.20 -
GData 21 2010.10.20 Gen:Variant.Kazy.1916
Ikarus T3.1.1.90.0 2010.10.20 Trojan-Dropper.Win32.Vundo
Jiangmin 13.0.900 2010.10.20 -
K7AntiVirus 9.66.2789 2010.10.19 -
Kaspersky 7.0.0.125 2010.10.20 -
McAfee 5.400.0.1158 2010.10.20 -
McAfee-GW-Edition 2010.1C 2010.10.19 -
Microsoft 1.6301 2010.10.20 -
NOD32 5546 2010.10.19 a variant of Win32/Kryptik.HMP
Norman 6.06.07 2010.10.19 -
nProtect 2010-10-19.01 2010.10.19 Gen:Variant.Kazy.1916
Panda 10.0.2.7 2010.10.20 -
PCTools 7.0.3.5 2010.10.20 -
Prevx 3.0 2010.10.20 Medium Risk Malware
Rising 22.70.01.08 2010.10.20 -
Sophos 4.58.0 2010.10.20 -
Sunbelt 7098 2010.10.20 Trojan.Win32.Vundo.j (v)
SUPERAntiSpyware 4.40.0.1006 2010.10.20 -
Symantec 20101.2.0.161 2010.10.20 -
TheHacker 6.7.0.1.062 2010.10.20 -
TrendMicro 9.120.0.1004 2010.10.19 -
TrendMicro-HouseCall 9.120.0.1004 2010.10.20 -
VBA32 3.12.14.1 2010.10.19 -
ViRobot 2010.10.20.4102 2010.10.20 -
VirusBuster 12.69.7.0 2010.10.19 -
i have not scanned the other 13files yet..but do not know how to tell if a .dll is bad or not.. none of them are real words or anything just stuff like ssbtnc or somthing like that. the file i did scan will not let me delet it saying i need premission. i have UAC turned off so i should be getting that. one other thing i can't open malware bytes either now