Ad: Manage updates with the Download App

AVG forum: Rundll in virus vault

by: esoRdeR October 25, 2010 7:52 AM PDT

Like this

0 people like this thread

Staff pick

Rundll in virus vault

by esoRdeR - 10/25/10 7:52 AM

When I had installed AVG free a few months ago, the Resident Shield said that a .dll program in the WINDOWS folder was a trojan even though I think it was just a part of the Windows system.

Anyway, it's in the virus vault and ever since it's been put in there, I get a pop up box, especially now since I upgraded to AVG free 2011, that looks like the box below.

http://i55.tinypic.com/iequlk.jpg

After that box, I get another one about the same thing. The .dll file is called aruwadilakizax. Is that.dll file that's in the virus vault really a trojan or a false positive? Should I restore the file from the vault and put it in as an exception?

I use Firefox/3.6.11 and Windows XP service pack 3.

Thanks


Reply
Report offensive post
Email to friend

Infection

by Dusan_AVG - 10/26/10 6:05 AM

In Reply to: Rundll in virus vault by esoRdeR

Hello,

Dll looks like a real infection.

Firstly update your AVG and run full system scan to check if computer is clean.

Afterwards provide us with Autoruns tool output (as compressed .arn file) so we can help you with the message.

Since it is not possible to attach files on cnet, upload it to some online storage service and provide us with link:
http://forums.avg.com/ww-en/avg-free-forum?sec=thread&act=show&id=85865

Thanks


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Rundll in virus vault

by esoRdeR - 10/27/10 10:26 AM

In Reply to: Infection by Dusan_AVG

Hello,

Here is the autorun file. I uploaded it with Megaupload.

http://www.megaupload.com/?d=W5Z2GLGB

I had checked the virus vault and since I upgraded AVG, it doesn't seem to be in the vault anymore so I'm hoping you can help me to get rid of this problem for good. The Autorun entry for it is called myerazobesitefes.


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

RE

by Dusan_AVG - 10/28/10 4:49 AM

In Reply to: Rundll in virus vault by esoRdeR

Hello,

Please provide us with the file:
c:\windows\aruwadilakizax.dll
As described here:
http://forums.avg.com/ww-en/avg-free-forum?sec=thread&act=show&id=397

Afterwards, delete entry for that file using autoruns.
Restart the computer and run full scan once again.

Thanks


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Re

by esoRdeR - 10/29/10 2:36 PM

In Reply to: RE by Dusan_AVG

Today I had decided to try going into the Registry and manually remove it and so far, the pop boxes haven't shown up since and I also did a full scan on the computer and it didn't even detect anything. I'm hoping that it's gone for good now.

Thanks for your help. happy


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

simlar problem

by mike3809 - 11/29/11 1:07 AM

In Reply to: Rundll in virus vault by esoRdeR

hello my pc is running very slow to start and slow do anything I'm putting here because I think it may be related and I am gettting pop up boxes on start up grey boxes 2 of them with the heading rundll then

error loading c:\windows\Apopset2.dllthe specfied module could not be found and a OK button

error loading c:\windows\$XNTUniinstall64$\fbtil.dllthe specfied module could not be found a OK button
I have run a defrag
I have up dated AVG and run a full scan
I have installed hitman pro 3.5 and run a full scan
and I am still having the same problems could you help please,
I am running widows XP service pack 3


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Re: Similar problem

by Ondrej_AVG - 11/29/11 1:54 AM

In Reply to: simlar problem by mike3809

Hello mike3809,

Please follow these steps to disable (remove) mentioned call of .dll libraries, which are probably missing on your system (were infected and removed):
- download and run Microsoft Autoruns tool
- find mentioned .dll files (in Everything tab, or smaller AppInit tab)
- untick the checkbox on the line to disable the module from running (or right-click and choose delete)
- restart computer and check the situation again

In case the situation still persists, please gather Autoruns, Gmer and MSinfo32 outputs, upload it in an archive (zip file) to favorite online storage and provide us with link to it, so we can analyze the situation more closely.

Thank you


Was this reply helpful? (0)   (0)

Staff pick

Reply
Report offensive post
Email to friend

Forum Icon Legend

  • UnreadUnread
  • ReadRead
  • Locked threadLocked thread
  •   
  •   
  •   
  •   
  •   
  •   
  •   
  • ModeratorModerator
  • CNET StaffCNET Staff
  • Samsung StaffSamsung Staff
  • Norton Authorized Support TeamNorton Authorized Support Team
  • AVG StaffAVG Staff
  • avast! Staffavast! Staff
  • Webroot Support TeamWebroot Support Team
  • Acer Customer Experience TeamAcer Customer Experience Team
  • Windows Outreach TeamWindows Outreach Team
  • DISH staffDISH staff
  • Dell StaffDell Staff
  • Intel StaffIntel Staff
  • QuestionQuestion
  • Resolved questionResolved question
  • General discussionGeneral discussion
  • TipTip
  • Alert or warningAlert or warning
  • PraisePraise
  • RantRant

You are e-mailing the following post: Post Subject

Your e-mail address is used only to let the recipient know who sent the e-mail and in case of transmission error. Neither your address nor the recipient's address will be used for any other purpose.

Sorry, there was a problem emailing this post. Please try again.

Submit Email Cancel

Thank you. Sent email to

Close

Thank you. Sent email to

Close

You are reporting the following post: Post Subject

If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.

Offensive: Sexually explicit or offensive language

Spam: Advertisements or commercial links

Disruptive posting: Flaming or offending other users

Illegal activities: Promote cracked software, or other illegal content

Sorry, there was a problem submitting your post. Please try again.

Submit Report Cancel

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

Your message has been submitted and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.

Close

You are posting a reply to: Post Subject

The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to the CNET Forums policies for details. All submitted content is subject to CBS Interactive Site Terms of Use.

You are currently tracking this discussion. Click here to manage your tracked discussions.

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

Sorry, there was a problem submitting your post. Please try again.

Sorry, there was a problem generating the preview. Please try again.

Duplicate posts are not allowed in the forums. Please edit your post and submit again.

Submit Reply Preview Cancel

Thank you, , your post has been submitted.

> Click here to view your post. > Manage your tracked discussions. > Track this discussion. Close

Thank you, , your post has been submitted and will appear on our site shortly.

Close