Your MBAM log indicates some files will be deleted on reboot
. If MBAM encounters a file that is difficult to remove, you need to restart the computer so the malware can be fully removed. Failure to reboot normally
(not into safe mode) will prevent MBAM from removing all the malware. If you have not rebooted, make sure you do this. When done, rescan again with MBAM and check all items found for removal. Then click the Logs
tab and copy/paste the contents of the new report in your next reply. If you did reboot, then rescan again anyway and post a new log.
It's not unusual to receive "boot up" errors after using anti-virus and other security scanning tools to remove malware infection.RunDLL32.exe
is a legit Windows file that loads .dll files which too can be legit or malware related. A RunDLL "Error loading...
" or "specific module could not be found
" message usually occurs when the .dll file(s) that was set to run at startup has been deleted and it becomes an orphaned registry entry
. Windows is trying to load this file(s) but cannot locate it since the file was removed during an anti-virus or anti-malware scan. However, the associated registry entry remains and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message
. You need to remove this registry entry so Windows stops searching for the file when it loads.
If the error continues to appear after scanning with MBAM again, download Autoruns
, search for the related entry and then delete it.
- Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here if you're not sure how to do this.)
- Open the folder and double-click on autoruns.exe to launch it.
- Please be patient as it scans and populates the entries.
- When done scanning, it will say Ready at the bottom.
- Scroll through the list and look for a startup entry related to the file(s) in the error message.
- Right-click on the entry and choose delete.
- Reboot your computer and see if the startup error returns.