|
Posted by =?Utf-8?B?b3Jvbm8=?= on January 1, 2007, 4:47 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Thanks for your terrific reply, it worked :)
I also ran the norton removal tool again, just in case.
Orono
"Panda_man" wrote:
> Hi Orono ! Happy New Year !
>
> No , this was real trojan horse .
> It is just that in order to start everytime Windows loads , the trojan has
> injected a DLL file into a legit Windows process Rundll32 so that this
> process hosts the malware . You have removed the malicious file (thanks to
> AVG) ,which is great , and is the most important part . You only need to
> remove the registry entire left in your computer . Open Start-> Run - type:
> regedit.exe
> and press ENTER
>
> Carefully navigate to HKEY_Local Machine \ Software \ Microsoft \ Windows \
> Current Version \ Run
>
> In the right you'll see an entrie with name something like this:
> RunDLL : c:\WINDOWS\System32\config\systemprofile\Local Settings\Application
> Data\qfyqakn.dll
>
> Carefully right click it and delete it . Then close the Reg Edit .
>
> Disable System Restore.Right click on My Computer->Properties->System Restore
> Check Turn off system restore and Click OK.
>
> Restart and the machine and the "error" should be gone :)
>
> Enable System Restore for future usage:
> Right click on My Computer->Properties->System Restore.Uncheck Turn off
> system restore.Click OK
>
>
> Something else ... if you have used Norton , you'd better run Symantec's
> Norton Removal tool in order to completely get rid of Norton
>
> REMOVE NORTON version 2007 , 2006 , 2005 and 2004 and 2003
>
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=&docid=2004093015165236&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=
>
>
> Regards!
>
> --
> Panda_man
> Silver level Contributor
>
>
>
> "orono" wrote:
>
> > I have recently installed the free editions of AVG anti virus and Ad-aware
> > spyware removal. Various trojans, and some spyware were found (that had not
> > been picked up by Norton). One trojan horse was called "qfyqakn.dll", I
> > quarantined, then deleted it.
> >
> > Now when I start up, an I get the following:
> > RUNDLL Error Loading
> > c:\WINDOWS\System32\config\systemprofile\Local Settings\Application
> > Data\qfyqakn.dll
> > The specific module could not be found.
> >
> > I then click 'OK' and everything seems to function normally.
> > What's going on? Is this a file that I need or was the virus not fully
> > removed?
> > Please advise. Thanks.
| 
XML site map