Roings:library, what is it, how do I get rid of it?

Posted on 2004-11-17
Last Modified: 2013-11-16
I am running XP, Norton Internet Security, Adaware, Spybot, Stinger and a couple of others I can't remember right now.  Every time I scan with Spybot I get Roings:library at C:\windows\system32\objsafe.tlb.  It deletes ok but the next time I scan it is there again.  Is this anything to worry about and if so how do I keep it from coming back?
Question by:rider164
    LVL 65

    Accepted Solution

    Hello rider164 =)

    Can you find this file on the hard drive yourself, what if you delete it from safemode ??
    Does it return back ??
    LVL 4

    Expert Comment

    This can  be a problem.

    Look at
    for removal advice.

    hope this helps

    LVL 7

    Expert Comment

    The file objsafe.tlb is a type library, specifically for Visual Basic controls. See this link:

    So what you seem to be seeing is a symptom, not the problem. Now, Roings appears to be a nasty hijacker and should be removed ASAP like graemeboro says above.
    LVL 87

    Expert Comment

    Before running spybot turn your System Restore off (control panel, System). If this is turn on your system will reload the old config and your malware is back.

    Author Comment

    I searched for the file and deleted it in safe mode, problem gone.  Thanks
    LVL 65

    Expert Comment


    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    Suggested Solutions

    Healthcare organizations in the United States must adhere to the guidance of both the HIPAA (Health Insurance Portability and Accountability Act) and HITECH (Health Information Technology for Economic and Clinical Health Act) for securing and protec…
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now