strange variant rundll32
in [Security]
|
Prev: Microsoft Responds to the Evolution of Online Communities
Next: Lingering virus issue disables displaying of hidden files
From: asf66 on 6 May 2010 18:30 Dear All, When booting my laptop (T-60 Win XP SP3) after having some malware woe, I would get an error message stating that "rundll32hspyrmqb.exe" cannot be loaded and that the specified module cannot be found. If I hit OK, the message box closes and I'm able to use my laptop. Using the System Configuration Utility, I uncheck the box in the start-up tab with the word: rundll32hspyrmqb next to it. Now when I boot up my machine, I don't get the error message. I googled the file name, but didn't get any hits. I also submitted it to Norton with no results. Additionally, I did a search on all the rundll and all the exe files in my system and it did not show in the search results. Would it be correct to think that the adware attached itself to or created a dll file to run, but I deleted the actual malware and when the pc started to boot, it tried to run the link, but there is no process attached to it? Perhaps the file named in the System Config. Utility is only a name or partially removed virus. Can I get rid of this? Any thoughts would be most appreciated. Thanks- Asf66
From: David H. Lipman on 6 May 2010 19:28 From: "asf66" <asf66(a)discussions.microsoft.com> | Dear All, | When booting my laptop (T-60 Win XP SP3) after having some malware woe, I | would get an error message stating that "rundll32hspyrmqb.exe" cannot be | loaded and that the specified module cannot be found. If I hit OK, the | message box closes and I'm able to use my laptop. | Using the System Configuration Utility, I uncheck the box in the start-up | tab with the word: rundll32hspyrmqb next to it. Now when I boot up my | machine, I don�t get the error message. | I googled the file name, but didn�t get any hits. I also submitted it to | Norton with no results. Additionally, I did a search on all the rundll and | all the exe files in my system and it did not show in the search results. | Would it be correct to think that the adware attached itself to or created a | dll file to run, but I deleted the actual malware and when the pc started to | boot, it tried to run the link, but there is no process attached to it? | Perhaps the file named in the System Config. Utility is only a name or | partially removed virus. | Can I get rid of this? | Any thoughts would be most appreciated. | Thanks- Please do NOT Multi-Post. Please learn to Cross-Post to pertinent, On Topic, news groups instead. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: asf66 on 6 May 2010 21:15 "David H. Lipman" wrote: > From: "asf66" <asf66(a)discussions.microsoft.com> > > | Dear All, > > | When booting my laptop (T-60 Win XP SP3) after having some malware woe, I > | would get an error message stating that "rundll32hspyrmqb.exe" cannot be > | loaded and that the specified module cannot be found. If I hit OK, the > | message box closes and I'm able to use my laptop. > > | Using the System Configuration Utility, I uncheck the box in the start-up > | tab with the word: rundll32hspyrmqb next to it. Now when I boot up my > | machine, I don't get the error message. > > | I googled the file name, but didn't get any hits. I also submitted it to > | Norton with no results. Additionally, I did a search on all the rundll and > | all the exe files in my system and it did not show in the search results. > > | Would it be correct to think that the adware attached itself to or created a > | dll file to run, but I deleted the actual malware and when the pc started to > | boot, it tried to run the link, but there is no process attached to it? > | Perhaps the file named in the System Config. Utility is only a name or > | partially removed virus. > > | Can I get rid of this? > > | Any thoughts would be most appreciated. > | Thanks- > > > Please do NOT Multi-Post. > > Please learn to Cross-Post to pertinent, On Topic, news groups instead. > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > > > . > My apologies.
From: David H. Lipman on 6 May 2010 21:22
From: "asf66" <asf66(a)discussions.microsoft.com> | My apologies. We all learn at some point :-) -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp |