Re: 2 missing .dll files (?) AFTER removal of spyware
- From: Geoff <geoff@xxxxxxxxxxxxxxx>
- Date: Wed, 31 Dec 2008 08:08:03 -0800
On Wed, 31 Dec 2008 03:57:01 -0800, PattiNS
<PattiNS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I worked with the folks at Microsoft security past 2 days, which enabled me
to get the nasty Vundo and firewall-bypass (among others) spyware and malware
removed from my HP laptop.
Now, after I (happily) no longer get those yucky popups on my PC since all
the malware has been removed, I keep getting the following two (2)
SIMULTANEOUS Microsoft Windows XP (home edition) popups AFTER I start OR
reboot my PC:
Error loading C:\WINDOWS\system32\kiramega.dll
The specified module could not be found
Error loading C:\WINDOWS\system32\falolofu.dll
The specified module could not be found
My question is: *how* can I get these two "error message" to *not* appear
any more, going forward? Very annoying when I boot up my HP laptop! If this
helps any, I recall these two .dll files came up as "could not remove" after
the Microsoft tech assistant helped me remove them from my laptop. HELP!!!
The files are gone but the system is still attempting to load them.
Download Autoruns and you may be able to see the registry entries that are
set to load those DLL's. They will be marked as unavailable files.
http://technet.microsoft.com/en-us/sysinternals/cb56073f-62a3-4ed8-9dd6-40c84cb9e2f5.aspx
You can probably see the entry right away, un-check the box to disable the
function and it will disable the loading of that DLL and back up the
setting just in case you goof.
Reboot and check that your startup is clean again.
Start Autoruns again and delete the disabled entries.
Do a complete search of your disks for those DLLs by name to make sure they
are gone. (Although in some cases this can be a false negative if they are
hiding.) Confidence is relatively high that since they are not loading they
are not stealthed.
.
- References:
- 2 missing .dll files (?) AFTER removal of spyware
- From: PattiNS
- 2 missing .dll files (?) AFTER removal of spyware
- Prev by Date: Re: UPDATE - Suspect Virus-USER 32.DLL
- Next by Date: Re: UPDATE - Suspect Virus-USER 32.DLL
- Previous by thread: Re: 2 missing .dll files (?) AFTER removal of spyware
- Index(es):
Relevant Pages
|