Prev: need old 5 1/4 floppy on XP
Next: .NET ??
From: Janet Griffin on 5 Apr 2010 16:52
I keep getting a message when I turn on my computer telling me that
"C:\WINDOWS\afitelaguzeyaweb.dll is not specified and cannot be found. Anyone
have any idea what this is and why it keeps messing up my browser?
From: nass on 5 Apr 2010 17:11


"Janet Griffin" wrote:

> I keep getting a message when I turn on my computer telling me that
> "C:\WINDOWS\afitelaguzeyaweb.dll is not specified and cannot be found. Anyone
> have any idea what this is and why it keeps messing up my browser?

Hi,
This mean your antivirus deleted the viral infection but this the remain (
linker) pointed to that path: C\Windows\


Try to scan for malware and viruses and let us know your findings:

http://www.superantispyware.com/superantispywarefreevspro.html
Malwarebytes© Corporation - Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

BlackLight
http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/blacklight/
BlackLight
ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe

Easy Clean
http://www.f-secure.com/en_EMEA/security/security-center/easy-clean/


Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html

If the above doesn't help or you denied to download such utilities try to
download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting or you can send it to me on my email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at to_you_rossREMOVETHISCAPS(a)yahoo.co.uk ,
remove the obvious to email me.

HTH
nass
---
http://www.nasstec.co.uk



..


From: philo on 5 Apr 2010 17:55
nass wrote:
>
> "Janet Griffin" wrote:
>
>> I keep getting a message when I turn on my computer telling me that
>> "C:\WINDOWS\afitelaguzeyaweb.dll is not specified and cannot be found. Anyone
>> have any idea what this is and why it keeps messing up my browser?
>
> Hi,
> This mean your antivirus deleted the viral infection but this the remain (
> linker) pointed to that path: C\Windows\
>
>
> Try to scan for malware and viruses and let us know your findings:
>
> http://www.superantispyware.com/superantispywarefreevspro.html
> Malwarebytes© Corporation - Anti-Malware
> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
>
> BlackLight
> http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/blacklight/
> BlackLight
> ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe
>
> Easy Clean
> http://www.f-secure.com/en_EMEA/security/security-center/easy-clean/
>
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (offline scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
> Comodo BOClean : Anti-Malware Version 4.27
> http://www.comodo.com/boclean/boclean.html
>
> If the above doesn't help or you denied to download such utilities try to
> download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting or you can send it to me on my email
> provided at the bottom:
> When all else fails, HijackThis v2.0.2
> (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
>
> Can you please send me a copy at to_you_rossREMOVETHISCAPS(a)yahoo.co.uk ,
> remove the obvious to email me.
>
> HTH
> nass
> ---
> http://www.nasstec.co.uk
>
>
>
> .
>
>


Correct

run msconfig and see if it's listed there in startup

if so, uncheck the box
From: nass on 6 Apr 2010 05:25


"philo" wrote:

> nass wrote:
> >
> > "Janet Griffin" wrote:
> >
> >> I keep getting a message when I turn on my computer telling me that
> >> "C:\WINDOWS\afitelaguzeyaweb.dll is not specified and cannot be found. Anyone
> >> have any idea what this is and why it keeps messing up my browser?
> >
> > Hi,
> > This mean your antivirus deleted the viral infection but this the remain (
> > linker) pointed to that path: C\Windows\
> >
> >
> > Try to scan for malware and viruses and let us know your findings:
> >
> >
> >
> > Easy Clean
> >
> >
> >
> > Run a scan from here on-line:
> >
> > If the above doesn't help or you denied to download such utilities try to
> > download the Hijackthis and send the report to one of
> > many
> > forums for analysis and troubleshooting or you can send it to me on my email
> > provided at the bottom:
> > When all else fails, HijackThis v2.0.2
> >
> > Can you please send me a copy at to_you_rossREMOVETHISCAPS(a)yahoo.co.uk ,
> > remove the obvious to email me.
> >
> > HTH
> > nass
> > ---

> >
> >
> >
> > .
> >
> >
>
>
> Correct
>
> run msconfig and see if it's listed there in startup
>
> if so, uncheck the box
> .


Msconfig great when you want to disable App or service from running at start
up. But not good for removing remains or orphans for an infection, for a
simple reason! The orphans can regenerate/resurrect the infection back ( some
scrip/txt file reside on the target machine or an entry in the reg or GPO).

The best thing is a thorough scan and remove debris and patch up the system
in question.
Regards
nass

From: Jose on 6 Apr 2010 06:28
On Apr 5, 4:52 pm, Janet Griffin
<JanetGrif...(a)discussions.microsoft.com> wrote:
> I keep getting a message when I turn on my computer telling me that
> "C:\WINDOWS\afitelaguzeyaweb.dll is not specified and cannot be found. Anyone
> have any idea what this is and why it keeps messing up my browser?

Here is what to do first, what it means and how to remove the bogus
entry the "right" way:.

Perform some scans for malicious software first, then fix any
remaining issues:

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

They can be uninstalled later if desired.

Reboot, test and if you still see the message:

A "Cannot find...", "Cannot start..., "Could not run...", " ... or
"specific module could not be found" message is usually related to
malware that was set to run at startup but the referenced file(s) has
been deleted after a malware scan leaving behind a registry entry
pointing to a file that does not exist. It could be from a malicious
software removal or an uninstalled application. THe entry may have a
curious looking name since it was probably generated at random when
the mawlare was installed.

Windows is trying to load this file but cannot locate it since the
file was mostly likely removed during an scan for malicious software.
However, an associated orphaned startup parameter or registry entry
remains and is telling Windows to load the file when you boot up or
login.

You need to remove the referenced entry so Windows stops trying to run
the file. It may or may not be in the registry. Autoruns (see below)
will find the item no matter where it is. If you just uncheck the
item in msconfig, that disables the item but does not remove it from
your computer.

If you are comfortable editing the registry you can search for and
remove the reference from or remove it using a popular third party
tool called Autoruns.

Before making any changes to your registry by hand or with third party
tools, be sure to make a backup of the registry first. Here is a link
to a popular registry backup tool:

http://www.larshederer.homepage.t-online.de/erunt/

Autoruns does not install anything on your computer. It will display
all of the startup locations where the reference might be so you can
disable it or delete it completely. Here is the download link for
Autoruns:

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

Launch Autoruns.exe and wait for it to finish populating the list of
entries.

When Autoruns is finished scanning your system, it will say "Ready" at
the bottom left corner.

The problem item is usually in the usually the system startup or user
startup entries so click the Logon tab.

Scroll through the list and look for a startup entry related to the
file(s) in the error message.

If you don't find it there, look for it in the Everything tab.

Right-click on the offending entry and choose to delete it or find it
in the registry or Startup folder and fix it.

Reboot your computer and troubleshoot remaining issues.
 | 
Pages: 1
Prev: need old 5 1/4 floppy on XP
Next: .NET ??