SUBSIM Radio Room Forums



SUBSIM: The Web's #1 resource for all submarine & naval simulations since 1997

Go Back   SUBSIM Radio Room Forums > General > General Topics > PC Hardware/Software forum
Forget password? Reset here

Reply
 
Thread Tools Display Modes
Old 04-20-09, 08:13 AM   #1
AVGWarhawk
Lucky Jack
 
AVGWarhawk's Avatar
 
Join Date: Jun 2005
Location: In a 1954 Buick.
Posts: 28,261
Downloads: 90
Uploads: 0


Default

Run Windows Defender and see if it catches it.
__________________
“You're painfully alive in a drugged and dying culture.”
― Richard Yates, Revolutionary Road
AVGWarhawk is offline   Reply With Quote
Old 04-20-09, 12:18 PM   #2
NeonSamurai
Ocean Warrior
 
Join Date: Jan 2002
Location: Socialist Republic of Kanadia
Posts: 3,044
Downloads: 25
Uploads: 0


Default

As a guess I would say some virus scanner or malware scanner found and deleted the dll file, but left behind everything else particularly the registry entries.

You may have to finish the job by hand (or use a good scanner that will clear everything else, like spybot search&destroy).
NeonSamurai is offline   Reply With Quote
Old 04-20-09, 01:14 PM   #3
Kapitan_Phillips
Silent Hunter
 
Kapitan_Phillips's Avatar
 
Join Date: Jul 2005
Location: Swansea
Posts: 3,903
Downloads: 204
Uploads: 0
Default

Okay guys thanks, I have Avast having a butchers around the place, AdAware, CCleaner, Spybot and Auslogics will be in line.

If it isnt a legitamate registry entry, how come every single program I open comes up with the error?
__________________
Well, here's another nice mess you've gotten me into.
Kapitan_Phillips is offline   Reply With Quote
Old 04-20-09, 03:03 PM   #4
NeonSamurai
Ocean Warrior
 
Join Date: Jan 2002
Location: Socialist Republic of Kanadia
Posts: 3,044
Downloads: 25
Uploads: 0


Default

It could be that the malware is tied into those programs somehow, or that it checks to see if its running when ever a new application is started.

No matter what though that isn't a normal .dll, and definitely not something they would all need to run, normally anyhow.
NeonSamurai is offline   Reply With Quote
Old 04-20-09, 03:10 PM   #5
Task Force
Rear Admiral
 
Join Date: Jul 2008
Location: SPACE!!!!
Posts: 10,142
Downloads: 85
Uploads: 0
Default

I had a .dll file that had a issue when starting up a while ago... Then it stoped... Havent knoticed any popups, or slowness.
__________________
Task Force industries "Taking control of the world, one mind at a time"
Task Force is offline   Reply With Quote
Old 04-20-09, 04:07 PM   #6
Kapitan_Phillips
Silent Hunter
 
Kapitan_Phillips's Avatar
 
Join Date: Jul 2005
Location: Swansea
Posts: 3,903
Downloads: 204
Uploads: 0
Default




Its fixed! Thanks all for the suggestions!
__________________
Well, here's another nice mess you've gotten me into.
Kapitan_Phillips is offline   Reply With Quote
Old 04-20-09, 03:08 PM   #7
HunterICX
Rear Admiral
 
Join Date: May 2006
Location: Malaga, España
Posts: 10,750
Downloads: 8
Uploads: 0


Default

Quote:
Originally Posted by NeonSamurai View Post
As a guess I would say some virus scanner or malware scanner found and deleted the dll file, but left behind everything else particularly the registry entries.

You may have to finish the job by hand (or use a good scanner that will clear everything else, like spybot search&destroy).
Vundo even infests itself into msconfig, that will re-animate the Malware when you reboot the system and are connected to the internet.

I ran a fix called ComboFix which removed the virus from the windows key files

also use a Autorun Manager to disable&Remove these DLL's (they are easy to spot as the names are complete giggly goo)

and work OFFLINE to make sure it doesn't come right back in.

when I had this at work (Win XP)
I used the following

Spybot S&D - Detection and removal of minor files it could detect
AVG8.0 Free - Same as above

Combofix - remove the vundo from the windows key files
Autorun Manager - to disable the malware DLL files and remove them (also to check if your system is clean again)

and work offline ofcourse

you might want to double check everything so scan your PC multiple times to make sure you got rid of it.

HunterICX
__________________
HunterICX is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 12:58 AM.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Copyright © 1995- 2025 Subsim®
"Subsim" is a registered trademark, all rights reserved.