Welcome Guest ( Log In | Click here to Register a free account now! )
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.| Important Announcement: We have two terrific contests running on the site that I wanted all our members and guests to know about. The first contest is the HP Magic Giveaway, which is underway as of November 28th. More information can be found at this topic, which will be updated very soon with further information. The second contests, is for the chance to win two Seagate FreeAgent external hard drives. More information about this contest can be found here. These are both amazing contests and I suggest everyone submit an entry for them. - BleepingComputer Management |
![]() ![]() |
Feb 13 2008, 06:45 PM
Post
#1
|
|
|
New Member ![]() Group: Members Posts: 3 Joined: 13-February 08 Member No.: 190,024 |
I have a VISTA Laptop with Norton and SpyWare Doctor. Had been doing well until got affected by Spyware. although the spyware was removed by the spyware Docter but am getting error while Windows start up . Please find the erros as under. Error Loading c:\Users\me\AppData\Local\Temp\deyekjyj.dll specified module could not be found. Error Loading c:\Users\me\AppData\Local\Temp\tustu.dll specified module could not be found. Error Loading c:\Users\me\AppData\Local\Temp\qomkj.dll specified module could not be found. Error Loading c:\Users\me\AppData\Local\Temp\xkkdtjhj.dll specified module could not be found. Also i find the Boot time has incresed considerably....Other operations are fine. Would be very much indebted if you could please help me out of this.. Thanking you for your help Dhrubo |
|
|
|
Feb 13 2008, 07:17 PM
Post
#2
|
|
|
Senior Member ![]() ![]() ![]() ![]() Group: Members Posts: 362 Joined: 15-July 07 From: 6,378 km above the Earth's core Member No.: 143,724 |
Here's a couple of things I would do to address this:
1. Make a backup of your registry. A highly recommended freeware program on these boards is ERUNT. Windows System Restore is not a good recovery solution in the event of a corrupted registry. 2. After setting up a backup, download a program like autoruns and selectively delete any entries that are related to malware. Be sure to research each file you are considering deleting to make sure they are not associated with valid programs. If you prefer, feel free to post a hijackthis log in the appropriate forum to solicit help from the more experienced than myself. Hope it helps a little. -------------------- Toshiba Satellite A135 OS: Vista Home Premium SP1 Processor: T2250 @ 1.73 GHz (2 CPUs), ~1.7 GHz RAM: 1526 MB Display: Mobile Intel® 945GM/GU Express Chipset Family |
|
|
|
Feb 13 2008, 07:46 PM
Post
#3
|
|
|
New Member ![]() Group: Members Posts: 3 Joined: 13-February 08 Member No.: 190,024 |
Thanks for ur inputs..
But could you please see me through this.. am a newbee in this field. I followed the steps you suggested.. but could only find the deyekjyj.dll beind associated with a program named MS Juan.. The other missing dll files didn't come up in the auto run.. can you please provide some insight as to what sud i do with this "MS Juan". What log file should i post.. am using Spyware doctor and as of now it shows no infetion whatso ever from itz run. Thanks a ton for ur help Regards Dhrubo |
|
|
|
Feb 14 2008, 08:14 AM
Post
#4
|
|
![]() Still visually handicapped, new avatar :0) ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 14,676 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
A google search for the file/files in your error message(s) shows very few results. This is suspicious and can be an indication that those files are related to malware.
Windows is giving (at startup) an error message that says that it can't find those files - so that's actually a good thing. I suspect that an antivirus/antispyware program has removed malware from your system - and that it hasn't removed the startup entries associated with it. To remove the startup entries, first download and open this free program: http://www.microsoft.com/technet/sysintern...s/Autoruns.mspx In the Everything tab, scroll down the column that says "Image Path" and look for those entries. Once you find them, remove the checkmark from the box on the left side of that line. Then close the program and reboot. The error messages should have disappeared. If they haven't disappeared upon reboot, please post back with the details of exactly which errors messages are now popping up. Additionally, I'd suggest that you download this free program and use it to clean your temporary files: http://www.ccleaner.com/download Please use the default settings to clear the temporary files. The more advanced features are dangerous to use, so please avoid them. Finally, I'd suggest that you use a couple of these free online scans to see if there are any traces of infection still on your system. Be advised that some of these scanners will pickup things in "quarantine" from other anti-virus programs - so review the results carefully: http://safety.live.com (requires IE) If using Vista, click on the error message to use the beta scanner. http://housecall.trendmicro.com http://www.pandasecurity.com/homeusers/solutions/activescan/ http://www.kaspersky.com/virusscanner http://www.bitdefender.com/scan8/ie.html http://support.f-secure.com/enu/home/ols.shtml http://security.symantec.com/sscv6/default...e&venid=sym http://us.mcafee.com/root/mfs/default.asp http://onlinescan.avast.com/ http://ca.com/us/securityadvisor/virusinfo/scan.aspx http://www.eset.com/onlinescan/ -------------------- - John
**If you need a more detailed explanation, please ask for it. I have the Knack. ** |
|
|
|
Feb 15 2008, 08:46 PM
Post
#5
|
|
|
Member ![]() ![]() Group: Members Posts: 15 Joined: 15-February 08 Member No.: 190,431 |
Hi wow spyware doc and norton are both heavy programs on start up, what i did to make vista faster was nuke alot of start up things in msconfig and use avg free, I run spywaredoctor when i need to then shut it down. try spybot S&D run that looks like something program got deleted system restore even goodluck
This post has been edited by bigben1: Feb 15 2008, 08:49 PM |
|
|
|
Feb 16 2008, 04:54 PM
Post
#6
|
|
|
New Member ![]() Group: Members Posts: 3 Joined: 13-February 08 Member No.: 190,024 |
Hi All,
Thanks for all your inputs. Followed all steps as suggested by Usama but as i already added that i could only find one dll file of the 4 that were giving error, on running the autorun application... I even found the entry of the dll that i found(associated with MS Juan application) in Registry and have deleted the same.This is done but the rest of the dll files were still giving me RUN DLL errors as under... Error Loading c:\Users\me\AppData\Local\Temp\tustu.dll specified module could not be found. Error Loading c:\Users\me\AppData\Local\Temp\qomkj.dll specified module could not be found. Error Loading c:\Users\me\AppData\Local\Temp\xkkdtjhj.dll specified module could not be found. I found entries of these files in StartUp and as of now have Unchecked them in system configuration utility MSCONFIG.so the errors no more appear... But what makes me still worried is if these DLL entries are not in Registry although in the start up tab they show their location as HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. then where are they coming from and in the long run is it safe enough to keep these dll's bloced in the Start UP. Looking for your Valuable inputs and suggestions.. Cheers Dhrubo... |
|
|
|
Feb 16 2008, 05:08 PM
Post
#7
|
|
![]() Still visually handicapped, new avatar :0) ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 14,676 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
The files ending in .dll were located in your Temporary files. Some antivirus program has removed them from your computer (and CCleaner has made sure of that). You should not be able to find them as they have been deleted from your system.
The errors are coming because Windows cannot find the file in order to make it run (because it was deleted). This is a good thing - although the error is irritating. The registry entries are not where the DLL's are located - rather that's the location in the Windows startup that tries to launch the virus. When you logon to your account, Windows loads/runs the stuff in the HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key of your registry. Disabling those entries (by removing the checkmark) is sufficient to remove the error message - but, if you'd like, you can right click on them and select "delete". That will eliminate any traces of these keys in the registry (just don't delete the entire HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key). -------------------- - John
**If you need a more detailed explanation, please ask for it. I have the Knack. ** |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 2nd December 2008 - 10:17 AM |