[bgg]

Hello. I am new to 2-spyware.com, so if I have not posted this in the best forum, please let me know where to repost.

I have a computer that has an entry in the HKLM\...\run section that reads as follows.

[Aqacovit] rundll32.exe "c:\windows\iliyelovawubixax.dll",e

Malwarebytes finds this and wants to remove on startup and it does remove the registry setting and the file iliyelovawubixax.dll. However, after several minutes, the registry setting returns and a new dll shows up (with a different but just as strange name).

I saw the post on how to find processes running under rundll32, but I have not yet tried this.

Does anybody have ideas on how to fix this? Thanks in advance.