PCbanter

PCbanter (http://www.pcbanter.net/index.php)
-   Security and Administration with Windows XP (http://www.pcbanter.net/forumdisplay.php?f=16)
-   -   strange variant rundll32 (http://www.pcbanter.net/showthread.php?t=1068474)

asf66 May 6th 10 11:30 PM

strange variant rundll32
 
Dear All,

When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
would get an error message stating that "rundll32hspyrmqb.exe" cannot be
loaded and that the specified module cannot be found. If I hit OK, the
message box closes and I'm able to use my laptop.

Using the System Configuration Utility, I uncheck the box in the start-up
tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
machine, I don’t get the error message.

I googled the file name, but didn’t get any hits. I also submitted it to
Norton with no results. Additionally, I did a search on all the rundll and
all the exe files in my system and it did not show in the search results.

Would it be correct to think that the adware attached itself to or created a
dll file to run, but I deleted the actual malware and when the pc started to
boot, it tried to run the link, but there is no process attached to it?
Perhaps the file named in the System Config. Utility is only a name or
partially removed virus.

Can I get rid of this?

Any thoughts would be most appreciated.
Thanks-
Asf66




David H. Lipman May 7th 10 12:28 AM

strange variant rundll32
 
From: "asf66"

| Dear All,

| When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
| would get an error message stating that "rundll32hspyrmqb.exe" cannot be
| loaded and that the specified module cannot be found. If I hit OK, the
| message box closes and I'm able to use my laptop.

| Using the System Configuration Utility, I uncheck the box in the start-up
| tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
| machine, I don’t get the error message.

| I googled the file name, but didn’t get any hits. I also submitted it to
| Norton with no results. Additionally, I did a search on all the rundll and
| all the exe files in my system and it did not show in the search results.

| Would it be correct to think that the adware attached itself to or created a
| dll file to run, but I deleted the actual malware and when the pc started to
| boot, it tried to run the link, but there is no process attached to it?
| Perhaps the file named in the System Config. Utility is only a name or
| partially removed virus.

| Can I get rid of this?

| Any thoughts would be most appreciated.
| Thanks-


Please do NOT Multi-Post.

Please learn to Cross-Post to pertinent, On Topic, news groups instead.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



asf66 May 7th 10 02:15 AM

strange variant rundll32
 


"David H. Lipman" wrote:

From: "asf66"

| Dear All,

| When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
| would get an error message stating that "rundll32hspyrmqb.exe" cannot be
| loaded and that the specified module cannot be found. If I hit OK, the
| message box closes and I'm able to use my laptop.

| Using the System Configuration Utility, I uncheck the box in the start-up
| tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
| machine, I don’t get the error message.

| I googled the file name, but didn’t get any hits. I also submitted it to
| Norton with no results. Additionally, I did a search on all the rundll and
| all the exe files in my system and it did not show in the search results.

| Would it be correct to think that the adware attached itself to or created a
| dll file to run, but I deleted the actual malware and when the pc started to
| boot, it tried to run the link, but there is no process attached to it?
| Perhaps the file named in the System Config. Utility is only a name or
| partially removed virus.

| Can I get rid of this?

| Any thoughts would be most appreciated.
| Thanks-


Please do NOT Multi-Post.

Please learn to Cross-Post to pertinent, On Topic, news groups instead.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.


My apologies.

David H. Lipman May 7th 10 02:22 AM

strange variant rundll32
 
From: "asf66"

| My apologies.

We all learn at some point :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp




All times are GMT +1. The time now is 03:14 PM.

Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright © 2004 - 2006 PCbanter
Comments are property of their posters