Need clean XP dll's

  • Thread starter Thread starter Jaz
  • Start date Start date
J

Jaz

If I need to replace some XP dll's, where do I get them?
I couldn't find these packed in anything on the XP disk:
iempg.dll, mpgcom.dll, nsnarrator.exe.

A friend reported to me that they belive they have a virus identified
by Kaspersky as "trojanclicker.win32.rotarran" -- she ran some other
antivirus apps but they didn't find it, and "rotarran" doesn't hit on
Google, Symantec, McAfee, etc.

sfc /scannow found nothing... so I realize that this may be a false
positive (huristics enabled) and/or named something else by other
vendors, but she definately had something -- it was spawning IE
instances.

Advice?
(Please excuse the 'burp' when replying)
 
If I need to replace some XP dll's, where do I get them?
I couldn't find these packed in anything on the XP disk:
iempg.dll, mpgcom.dll, nsnarrator.exe.

A friend reported to me that they belive they have a virus identified
by Kaspersky as "trojanclicker.win32.rotarran" -- she ran some other
antivirus apps but they didn't find it, and "rotarran" doesn't hit on
Google, Symantec, McAfee, etc.

sfc /scannow found nothing... so I realize that this may be a false
positive (huristics enabled) and/or named something else by other
vendors, but she definately had something -- it was spawning IE
instances.

Advice?
(Please excuse the 'burp' when replying)
Click to expand...

I believe that these files are all dropped by trojans or viruses and
are not a part of the OS and so should not be there.

You need to run a Trojan removal program as well as an AV.
Try Spybot from http://www.safer-networking.org/index.php?page=mirrors

Taff..........



www.sounds-pa.com | www.thecomputerworkshop.com
 
If I need to replace some XP dll's, where do I get them?
I couldn't find these packed in anything on the XP disk:
iempg.dll, mpgcom.dll, nsnarrator.exe.

A friend reported to me that they belive they have a virus identified
by Kaspersky as "trojanclicker.win32.rotarran" -- she ran some other
antivirus apps but they didn't find it, and "rotarran" doesn't hit on
Google, Symantec, McAfee, etc.
Click to expand...

But note "rotarran" is "narrator" backwards.
Did you try searching for the file names? :)
sfc /scannow found nothing...
Click to expand...

I wouldn't expect SFC to find most trojans, as no changes to system
executables would have been made.
so I realize that this may be a false
positive (huristics enabled) and/or named something else by other
vendors, but she definately had something -- it was spawning IE
instances.

Advice?
Click to expand...

Learn to trust what is possibly the best AV for *detection* there is.
I can't remember the last time I heard of a false positive from KAV.

Symantec Security Response - Trojan.Narat
http://securityresponse.symantec.com/avcenter/venc/data/trojan.narat.html

Symantec Security Response - Adware.Mpgcom
http://securityresponse.symantec.com/avcenter/venc/data/adware.mpgcom.html

Carol
 
If I need to replace some XP dll's, where do I get them?
But note "rotarran" is "narrator" backwards.
Did you try searching for the file names? :)
Click to expand...

Yes, I used zipscan to search the XP cdrom for these files. Nada.
It turns out that KAV tech support responded in a couple of hours --
their advice was to just delete the files, which we did under Safe
Mode. So far so good :^)


(Please excuse the 'burp' when replying)
 
Back
Top