Required dll in XP?

  • Thread starter Thread starter Louis
  • Start date Start date
L

Louis

Had a virus problem recently and AVG detected the following file as a
virus: vkgduejc.dll.
I removed it and windows appears to work fine. The only problem is that
each time winxp starts it says 'cannot load vkgduejc.dll'.
I have to click 'ok' to let winxp continue, which it does without any
further problem. My questionsare:
1) Is this file a virus or is it genuine and required by winxp?
2) If it is not required at all how do I get rid of the message?

Thanks

Louis
 
Louis said:
Had a virus problem recently and AVG detected the following file as a virus:
vkgduejc.dll.
I removed it and windows appears to work fine. The only problem is that each
time winxp starts it says 'cannot load vkgduejc.dll'.
I have to click 'ok' to let winxp continue, which it does without any further
problem. My questionsare:
1) Is this file a virus or is it genuine and required by winxp?
2) If it is not required at all how do I get rid of the message?

Thanks

Louis
Click to expand...

The file was associated with the virus, it is not a valid Windows file.

Run a full system virus scan with fully up-to-date definitions.

**It is very important to run the update for each program before running the
app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running
tasks except explorer or systray and all apps are fully up to date.
Remove your Temp Internet files: Right click IE. Under the General tab click
Delete Files, put a check in Delete all Offline..., click OK and close when
finished.
Delete all files in c:\windows\temp.

Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com/~merijn/cwschronicles.html

Download/install/run Ad-Aware SE to detect/rid of any other parasites/spyware
that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the
latest up-to-date ref file, then run Ad-Aware and delete everything it finds.

Download/install/run Spybot - Search & Destroy:
http://security.kolla.de/index.php?lang=en&page=download
Run it at it's default settings until you learn an know more about it. Spybot
S&D is more of an advanced users tool and changing from the default settings can
be dangerous to the novice user. Items found in the default settings that are
RED can usually be safely removed. If you are unsure of a found item, do not
remove it and ask for help.

If you still have problems, download/run HijackThis from:

http://www.aumha.org/secure.htm
http://www.richardthelionhearted.com/~merijn/downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run
HJT in Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis
will list many apps that are needed along with the bad ones. Removing items
listed hap-hazardly without knowing what they are can/will create a royal mess.
Read the quick start here on how to create a log file that can be copied/pasted
into a forum that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting which
are most commonly posted first at the top in each specific forum. Read any
information under each forum category name for information on what that
particular one is used for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/
http://aumha.net/
http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS
File Manager here:
http://www.mvps.org/PracticallyNerded/Software.htm

Download/install/run SpywareBlaster which stops the bad boys before they even
get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

--


Brian A. Sesko { MS MVP_Windows Desktop User Experience }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts: http://dts-l.com/goodpost.htm
How to ask a question: http://support.microsoft.com/kb/555375
 
Louis said:
Had a virus problem recently and AVG detected the following file as a
virus: vkgduejc.dll.
I removed it and windows appears to work fine. The only problem is that
each time Win XP starts it says 'cannot load vkgduejc.dll'.
I have to click 'OK' to let Win XP continue, which it does without any
further problem. My questions are:
1) Is this file a virus or is it genuine and required by Win XP?
2) If it is not required at all how do I get rid of the message?

Thanks

Louis
Click to expand...

The malware was deleted by your a/v software, but the reference to the
file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.
 
Louis said:
Had a virus problem recently and AVG detected the following file as a
virus: vkgduejc.dll.
I removed it and windows appears to work fine. The only problem is that
each time winxp starts it says 'cannot load vkgduejc.dll'.
I have to click 'ok' to let winxp continue, which it does without any
further problem. My questionsare:
1) Is this file a virus or is it genuine and required by winxp?
2) If it is not required at all how do I get rid of the message?

Thanks

Louis
Click to expand...


Your Anti-virus removed the viral infection but still in the Root
system and on the Registry, please perform the cleaning steps to make sure
nothing lurking in the background to revive the infestation back to action!.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx


Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:

Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\Windows\System32\ vkgduejc.dll".

Run disk cleanup and defrag in safe mode. Then run this command:
sfc /scannow

HTH.
nass
 
Back
Top