From: Allen on
ICU wrote:
> I'm using WinXP Home , all updates installed, recently I have been getting
> an error when I shut down.
> It's just a flash on the screen that says something about HKLMU.exe and
> that .DLL initialization failed.
> The file is located in Windows\System32\Driver, no other file in this
> folder and I can not get any identidication on this file.
> This file is also mentioned in the Prefetch foler as well.
>
> I do have another another folder in Windows\System32\Drivers which is well
> populated.
>
> Any info or help would be appreciated.
>
> TIA
> ICU
>
From Google:

http://www.prevx.com/filenames/X265344855704333734-X1/HKLMU.EXE.html

Please understand that I am not recommending this; it was the first
thing in the list when I Googled HKLMU.

Allen
From: ICU on
Allen <allent(a)austin.rr.com> wrote in
news:75-dnTlpFebx5EfXnZ2dnUVZ_jdi4p2d(a)giganews.com:

> ICU wrote:
>> I'm using WinXP Home , all updates installed, recently I have been
>> getting an error when I shut down.
>> It's just a flash on the screen that says something about HKLMU.exe
>> and that .DLL initialization failed.
>> The file is located in Windows\System32\Driver, no other file in this
>> folder and I can not get any identidication on this file.
>> This file is also mentioned in the Prefetch foler as well.
>>
>> I do have another another folder in Windows\System32\Drivers which is
>> well populated.
>>
>> Any info or help would be appreciated.
>>
>> TIA
>> ICU
>>
> From Google:
>
> http://www.prevx.com/filenames/X265344855704333734-X1/HKLMU.EXE.html
>
> Please understand that I am not recommending this; it was the first
> thing in the list when I Googled HKLMU.
>
> Allen
>
Yes I found this by Google as well, sounds like exactly what I need,
symtoms and names all match, but unfortunately it will not run on my
machine, get message that says it has a problem and Prevx must shut down.
Strange that no other leads with Google for HKLMU.exe other than the
Prevx citation.

Thanks for the reply.

ICU
From: ICU on
Allen <allent(a)austin.rr.com> wrote in
news:75-dnTlpFebx5EfXnZ2dnUVZ_jdi4p2d(a)giganews.com:

> ICU wrote:
>> I'm using WinXP Home , all updates installed, recently I have been
>> getting an error when I shut down.
>> It's just a flash on the screen that says something about HKLMU.exe
>> and that .DLL initialization failed.
>> The file is located in Windows\System32\Driver, no other file in this
>> folder and I can not get any identidication on this file.
>> This file is also mentioned in the Prefetch foler as well.
>>
>> I do have another another folder in Windows\System32\Drivers which is
>> well populated.
>>
>> Any info or help would be appreciated.
>>
>> TIA
>> ICU
>>
> From Google:
>
> http://www.prevx.com/filenames/X265344855704333734-X1/HKLMU.EXE.html
>
> Please understand that I am not recommending this; it was the first
> thing in the list when I Googled HKLMU.
>
> Allen

A further update.
I contacted Prevx yesterday about the failure of Prevx to install, the
suggestion came back today to try installing in SafeMode.
I won't go into all the trials and tribulations but it finally worked, did
the scan and removed a few instances of malware, but said to remove the
rest of them needs a licensed copy.Damn!
So off I go to their web site and paid $33 plus Canadian dollars to get the
program registered for one year.
Happily when registered it seems to have removed all signs of HKLMU.exe.
The price was worth it, but it still irks me that software companies spout
"free" with regards to some software when it's not totally free. If any
limitations on free software are well noted up front I don't mind it, but
to run a piece of software then have it say "well to do what we advertise
this software can do you must now pay" just doesn't seem right but who said
life experiences with computers should always be free free eh!.(G)
Now somewhere some place there might be the info posted about this
particular peice of software not being 100% functional without payment but
I didn't see it, so I appologize if that info is out there for all to see
and this dummie just didn't see it.

The end result is I'm happy with the results I received with Prevx and I
guess that's all that matters.

Thanks to all for the replys trying to help me, it was most appreciated.

ICU




From: ICU on
Jose <jose_ease(a)yahoo.com> wrote in news:561043e2-b8b5-4ee4-857a-
6f52760cbec4(a)k4g2000yqb.googlegroups.com:

>> Are you saying the hklmu.exe is in the c:\windows\system32\drivers
>> folder? How did you discover that?
>
>
> No I am saying Hklmu.exe is in the c:\windows\systems32\driver folder
> no
> "S" , the folder that is the Drivers folder is well populated.
>
> Curious.
>
> I have never seen
>
> c:\windows\systems32\driver folder.
>
> There should be:
>
> c:\windows\system32\drivers
>
> I do not think there should be a "systems32" anything and there should
> be a "c:\windows\system32\drivers" folder with stuff in it, but no
> "driver" folder.
>
> You ran MBAM and SAS, as requested?
>
> Yes - only .pf files should be in the prefetch folder.
>
> Check/post the event log also for messages that are timestamped to
> coincide with your last shutdown.
>
> Please verify the spellings and paths with and be sure there are no
> typos (it happens), somebody else please verify me, and then we'll see
> if we can get you fixed up.
>
Jose, see my reply to Allen, todays date, re: the solution to my HKLMU.exe
maleware problem.
Thanks for your replys to this problem, most appreciated.

ICU


From: Pegasus [MVP] on

"ICU" <ICU(a)Nowhere.com> wrote in message
news:Xns9CA97CC1A8B88ICU(a)74.209.131.10...
> Allen <allent(a)austin.rr.com> wrote in
> news:75-dnTlpFebx5EfXnZ2dnUVZ_jdi4p2d(a)giganews.com:
>
>> ICU wrote:
>>> I'm using WinXP Home , all updates installed, recently I have been
>>> getting an error when I shut down.
>>> It's just a flash on the screen that says something about HKLMU.exe
>>> and that .DLL initialization failed.
>>> The file is located in Windows\System32\Driver, no other file in this
>>> folder and I can not get any identidication on this file.
>>> This file is also mentioned in the Prefetch foler as well.
>>>
>>> I do have another another folder in Windows\System32\Drivers which is
>>> well populated.
>>>
>>> Any info or help would be appreciated.
>>>
>>> TIA
>>> ICU
>>>
>> From Google:
>>
>> http://www.prevx.com/filenames/X265344855704333734-X1/HKLMU.EXE.html
>>
>> Please understand that I am not recommending this; it was the first
>> thing in the list when I Googled HKLMU.
>>
>> Allen
>
> A further update.
> I contacted Prevx yesterday about the failure of Prevx to install, the
> suggestion came back today to try installing in SafeMode.
> I won't go into all the trials and tribulations but it finally worked, did
> the scan and removed a few instances of malware, but said to remove the
> rest of them needs a licensed copy.Damn!
> So off I go to their web site and paid $33 plus Canadian dollars to get
> the
> program registered for one year.
> Happily when registered it seems to have removed all signs of HKLMU.exe.
> The price was worth it, but it still irks me that software companies spout
> "free" with regards to some software when it's not totally free. If any
> limitations on free software are well noted up front I don't mind it, but
> to run a piece of software then have it say "well to do what we advertise
> this software can do you must now pay" just doesn't seem right but who
> said
> life experiences with computers should always be free free eh!.(G)
> Now somewhere some place there might be the info posted about this
> particular peice of software not being 100% functional without payment but
> I didn't see it, so I appologize if that info is out there for all to see
> and this dummie just didn't see it.
>
> The end result is I'm happy with the results I received with Prevx and I
> guess that's all that matters.
>
> Thanks to all for the replys trying to help me, it was most appreciated.
>
> ICU

What made you think that the program was free to use? On the very first web
page it says "Money Back Guarantee for Individual Users . . .", which makes
it pretty clear that this is a commercial product, not freeware.

On a different subject: You should now ask yourself how your machine got
infected in the first place. Do you have a good virus scanner? Is it
up-to-date? Do you practise safe hex?