A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

strange variant rundll32



 
 
Thread Tools Display Modes
  #1  
Old May 6th 10, 11:30 PM posted to microsoft.public.windowsxp.security_admin
asf66
external usenet poster
 
Posts: 7
Default strange variant rundll32

Dear All,

When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
would get an error message stating that "rundll32hspyrmqb.exe" cannot be
loaded and that the specified module cannot be found. If I hit OK, the
message box closes and I'm able to use my laptop.

Using the System Configuration Utility, I uncheck the box in the start-up
tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
machine, I don’t get the error message.

I googled the file name, but didn’t get any hits. I also submitted it to
Norton with no results. Additionally, I did a search on all the rundll and
all the exe files in my system and it did not show in the search results.

Would it be correct to think that the adware attached itself to or created a
dll file to run, but I deleted the actual malware and when the pc started to
boot, it tried to run the link, but there is no process attached to it?
Perhaps the file named in the System Config. Utility is only a name or
partially removed virus.

Can I get rid of this?

Any thoughts would be most appreciated.
Thanks-
Asf66



Ads
  #2  
Old May 7th 10, 12:28 AM posted to microsoft.public.windowsxp.security_admin
David H. Lipman
external usenet poster
 
Posts: 4,185
Default strange variant rundll32

From: "asf66"

| Dear All,

| When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
| would get an error message stating that "rundll32hspyrmqb.exe" cannot be
| loaded and that the specified module cannot be found. If I hit OK, the
| message box closes and I'm able to use my laptop.

| Using the System Configuration Utility, I uncheck the box in the start-up
| tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
| machine, I don’t get the error message.

| I googled the file name, but didn’t get any hits. I also submitted it to
| Norton with no results. Additionally, I did a search on all the rundll and
| all the exe files in my system and it did not show in the search results.

| Would it be correct to think that the adware attached itself to or created a
| dll file to run, but I deleted the actual malware and when the pc started to
| boot, it tried to run the link, but there is no process attached to it?
| Perhaps the file named in the System Config. Utility is only a name or
| partially removed virus.

| Can I get rid of this?

| Any thoughts would be most appreciated.
| Thanks-


Please do NOT Multi-Post.

Please learn to Cross-Post to pertinent, On Topic, news groups instead.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


  #3  
Old May 7th 10, 02:15 AM posted to microsoft.public.windowsxp.security_admin
asf66
external usenet poster
 
Posts: 7
Default strange variant rundll32



"David H. Lipman" wrote:

From: "asf66"

| Dear All,

| When booting my laptop (T-60 Win XP SP3) after having some malware woe, I
| would get an error message stating that "rundll32hspyrmqb.exe" cannot be
| loaded and that the specified module cannot be found. If I hit OK, the
| message box closes and I'm able to use my laptop.

| Using the System Configuration Utility, I uncheck the box in the start-up
| tab with the word: rundll32hspyrmqb next to it. Now when I boot up my
| machine, I don’t get the error message.

| I googled the file name, but didn’t get any hits. I also submitted it to
| Norton with no results. Additionally, I did a search on all the rundll and
| all the exe files in my system and it did not show in the search results.

| Would it be correct to think that the adware attached itself to or created a
| dll file to run, but I deleted the actual malware and when the pc started to
| boot, it tried to run the link, but there is no process attached to it?
| Perhaps the file named in the System Config. Utility is only a name or
| partially removed virus.

| Can I get rid of this?

| Any thoughts would be most appreciated.
| Thanks-


Please do NOT Multi-Post.

Please learn to Cross-Post to pertinent, On Topic, news groups instead.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.


My apologies.
  #4  
Old May 7th 10, 02:22 AM posted to microsoft.public.windowsxp.security_admin
David H. Lipman
external usenet poster
 
Posts: 4,185
Default strange variant rundll32

From: "asf66"

| My apologies.

We all learn at some point :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 04:41 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.