Anyone have ideas - msbvidgtl.dll appears infected 1

[candyman200]

Several scan apps indicate I've got BKDR_AFCORE.K infecting system32/msbvidgtl.dll. When I try to clean/delete it, it says it's in use. I've tried in Safe mode but it doesn't help.
I noticed the properties page on the infected PC does not show a version tab. Can I copy another PCs dll over it if I boot in dos?
Any suggestions would be helpful.

*** Fix what's broken, whether it's a machine or a process. People don't need to be burdened by problems that could be corrected.

 

[diogenes10]

Killbox:

http://www.subratam.org/?page=removal

or the

"Delete a file on reboot" option of the newest versions of hijackthis

can help with removing stubborn files.

Your file name does not get any google hits which is a reasonably good indication that it is probably bad, the final decision remains with you though.

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[TomCologne]

Unregister the dll:

Regsvr32 /u backdoor.afcore.k.dll

reboot>delete backdoor.afcore.k.dll

Source:

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453082859

If you have a utility like Resource Hacker or Resource Utilities (

http://www.wilsonc.demon.co.uk/delphi.htm),

you can open the intruding file(s) and find out about the registry changes it performs.

TomCologne