Posted 16 April 2011 - 09:31 AM
This ujomesum startup item runs the command -- rundll32.exe "C:\Windows\ujomesum.dll",Startup -- (as shown in System Configuration Utility). I try to stop in from loading on startup using the MSCONFIG but it keeps coming back immediately (before reboot). I believe this showed up during my last virus infection that I removed using Malwarebytes. I search the registry and the program that is placing this in the startup folder is Qfoniquyi. I delete all keys and folders associated with these two names but they immediately come back. I have also run rkill and malwarebytes and it turns up nothing. I have searched the internet for these two names and have turned up nothing so I am assuming that they are some random names or something new. I am runnig 32-bit XP Pro sp3. There are no other noticable symptoms of this file execution, I just happen to run across it during periodic cleanup. Any ideas?