Removed virus and malware, got missing .dll

[Hologide]

Hey,

I recently removed the "Antimalware Doctor" malware/virus, but now have a RunDLL error everytime I boot windows.

"Error loading C:\Windows\system32\xnccvyi4t.dll

The specified module could not be found."

Is this familiar to anyone? Google didn't show anything.

[Behemoth]

I don't think thats part of windows, I suspect when you removed whatever virus/malware you had on there that something when you start Windows (check msconfig) is calling for that DLL file thats no longer on the PC itself.

[spoon_]

Its definitely in msconfig, alternative check services.msc

[dangel]

I don't think thats part of windows, I suspect when you removed whatever virus/malware you had on there that something when you start Windows (check msconfig) is calling for that DLL file thats no longer on the PC itself.

What he said - malware put a link into your registry to run on startup and as the file is now gone it can't start it (which is good when you think about it).

Grab yourself a copy of Malwarebytes Antimalware: http://www.malwarebytes.org/mbam.php

Scan repeatedly until everything is gone. Then do it again to sure.

Now get hold of CCleaner: http://www.piriform.com/

Open it, goto tools->startup and look carefully at what starting each time you login to your PC. Disable anything suspicious (e.g. randomly named DLLs!). Also use the registry cleaner in CCleaner to fix any other oddities.

Here's an example of a dodgy entry:

Yes HKLM:Run uPc+kt0NrdaGuo rundll32.exe C:\Windows\system32\vtij5dr.dll, SystemServer

Hope that helps, I see this alllllllllllllll the time.

[Hologide]

Great, thanks.

The only thing is, windows isn't working properly (and the errors occured at the same time as the .dll dissapeared). Windows Explorer is crashing repeatedly, and I can't view the icons to the left of the time and date. I know the icons are still there, because if I right click I can play with the options, but I can't see them... :\

[dangel]

Great, thanks.

The only thing is, windows isn't working properly (and the errors occured at the same time as the .dll dissapeared). Windows Explorer is crashing repeatedly, and I can't view the icons to the left of the time and date. I know the icons are still there, because if I right click I can play with the options, but I can't see them... :\

Make sure you're REALLY clear of malware - use that scanner to make very sure (use safe mode if necessary). Often you find that if you got one, you got a dozen. They like to party with their friends.

If your clear and your registry is cleaned up too and it's still barfed it's possible that damage has been done though.

[SLS]

So yeah, that dll entry is definitely bogus, not a part of windows... buut, your chances of this being the only legacy left behind from your recent infestation are slim to none. I'd recommend a SystemRestore if the infection was only recent, or repair windows by reinstalling it(Making sure you've not got a different SP than your CD) ontop of itself.

On the off chance this one dll is the whole problem however:

http://technet.microsoft.com/en-us/s.../bb963902.aspx
Autoruns is my preferred tool, hunt down that dll entry and remove it. Then reboot.