Solved

after removing malware RUNDLL error

Posted on 2013-05-21
7
1,046 Views
Last Modified: 2013-06-01
After removing the insidious "The FBI has your computer locked ....to unlock your computer pay $300 via GreenPak" all is working well except on startup I am getting an error message
"RUNDLL
Error loading C:\DOCUME~1\ALLUSE~1\APPLIC~1\boo2.dat
The specified module could not be found."
0
Comment
Question by:atf3doc
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 38

Expert Comment

by:Gerwin Jansen, EE MVE
ID: 39185498
That is probably because the malware cannot load anymore as it was removed.

Have a look with msconfig, TAB 'Startup' and look for an entry that has rundll and that ...boo2.dat in the command, then disable that startup entry.
0
 
LVL 27

Accepted Solution

by:
Thomas Zucker-Scharff earned 400 total points
ID: 39185504
or if you have autoruns on your system use that to do the same thing.
0
 

Author Comment

by:atf3doc
ID: 39185527
msconfig....no dll or boo2 listed. I unchecked registry booster2, just to see if that was it.
                    still get the error.
autoruns....am downloading it now..will install and try,,will advise
atf3doc
0
Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

 
LVL 27

Expert Comment

by:Thomas Zucker-Scharff
ID: 39185547
make sure you check the choice to show microsoft items.
0
 
LVL 38

Assisted Solution

by:Gerwin Jansen, EE MVE
Gerwin Jansen, EE MVE earned 100 total points
ID: 39185617
Yes, autoruns or hijackthis will show you the entry. Let us know what you find.
0
 

Author Comment

by:atf3doc
ID: 39185693
autoruns rules!!! Showed the error exacly as it was written...unchecked it and error message gone..hooray! Thanks.
0
 

Expert Comment

by:thebaldwonder3001
ID: 39213075
Thanks gerwinjansen!! It took me 2 days to finally find what was causing the rundll pop-up when the machine starts up. Checked msconfig startup tab and BINGO!
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question