[Programmist]

Normally when I run "msconfig" (running WinXP Pro SP2) and see something I don't recognize running at startup, a quick Google search will bring back thousands of results. Not this time. On September 21 of this year there were two files created (as protected operating system files) in my system32 folder called:

teboluna.dll
tenemime.dll

I cannot find anything anywhere about them. They were also marked as protected OS files, so I they were invisible until I unchecked the "hide protected operating system files" option. To be safe, I removed them from system32 and removed the run at startup option using msconfig. When I rebooted my system something tried to run teboluna again because I got an error. When I checked msconfig it was set to run at startup again (using Rundll.exe). My instinct says that it's probably a Windows thing, but until I know for sure I'm not putting them back.

Anyone have a clue?

[josiahb]

have you run a virus scan on them?

[Programmist]

Yes. No virus detected.

[Programmist]

This is embarrassing. I have an up-to-date firewall, up-to-date virus scanner, and I virus scan EVERYTHING. I don't use IE and I don't download from questionable sources yet somehow I think I may have gotten some kind of computer bug. I've run several utilities, but I've come to the conclusion that this kind of thing is more in the realm of computer tech support that software developer, so I've submitted my HijackThis and other reports to bleepingcomputer.com. Anyone have any other sites they'd recommend that might respond a bit faster?

Thanks

[josiahb]

CertForums may be worth ago, nearly everyone on there (including me) is working towards some sort of IT support certification so problems like this give a fairly good way to test your knowledge.