The new forums will be named Coin Return (based on the most recent vote)! You can check on the status and timeline of the transition to the new forums here.
The Guiding Principles and New Rules document is now in effect.

RUNDLL error

PcH340PcH340 Registered User regular
edited September 2009 in Help / Advice Forum
I have a little problem with my RUNDLL. About every 60 seconds I get a window that says "Error loading C:/Windows/wkbkbmp.dll" I tried looking up the file name on google, but theres no results. I've gotten these errors before but it would be once when my computer starts up, and that's it. Now my computer is being flooded with them. It is rather annoying. Any help on this would be appreciated!

10045645.jpg

PcH340 on

Posts

  • DrFrylockDrFrylock Registered User regular
    edited September 2009
    Welcome to the wonderful world of malware (probably--DLLs with random character names in your windows directory usually are.) Run Malwarebytes anti-malware. Afterward, post a hijackthis log here and I/we will check it out if you like.

    DrFrylock on
  • darkmayodarkmayo Registered User regular
    edited September 2009
    I am more of a DYI kinda guy, I would run regedit and search the entire registry for that specific DLL

    as well start up MSconfig and see if that DLL is listed in the startup processes.

    if found, disable it (if in msconfig) or delete it if in "Regedit"

    if your not comfortable doing stuff like this then go with a malware/adware scanner thingy. I use to use spybot search and destroy, I think it is still around.

    darkmayo on
    Switch SW-6182-1526-0041
  • underdonkunderdonk __BANNED USERS regular
    edited September 2009
    If it's malware, rebuild your machine.

    Seriously.

    underdonk on
    Back in the day, bucko, we just had an A and a B button... and we liked it.
  • PcH340PcH340 Registered User regular
    edited September 2009
    I'm not entirely sure, but I think Malwarebyte's did it. I scanned the computer and it found a trojan in C:/Windows/wkbkbmp.dll. I restarted my computer and so far so good - no rundll errors!

    PcH340 on
  • DrFrylockDrFrylock Registered User regular
    edited September 2009
    Of all the cases of malware I have ever encountered, I have seen only one that required a nuke from orbit. This one I removed with very powerful tools (I.e., those that delete files on bootup before the OS gets going) and I used four different rootkit scanners with no results before giving up. Still not sure where that guy was hiding. The rest, including some very pernicious cocktails, are removable. Traipsing through the registry at random is both dangerous and largely ineffective against modern malware. Spybot still exists, but IMHO Malwarebytes and Super Antispyware are the first lines of defense today.

    DrFrylock on
  • DrFrylockDrFrylock Registered User regular
    edited September 2009
    Gaaah simultaneous posting fail. Anyway congrats: now go patch all your software. This includes Windows, Office, anything that plays or reads files through your browser: Java, QuickTime, Flash, Acrobat, AIR, you name it.

    DrFrylock on
  • ronyaronya Arrrrrf. the ivory tower's basementRegistered User regular
    edited September 2009
    DrFrylock wrote: »
    Of all the cases of malware I have ever encountered, I have seen only one that required a nuke from orbit. This one I removed with very powerful tools (I.e., those that delete files on bootup before the OS gets going) and I used four different rootkit scanners with no results before giving up. Still not sure where that guy was hiding. The rest, including some very pernicious cocktails, are removable. Traipsing through the registry at random is both dangerous and largely ineffective against modern malware. Spybot still exists, but IMHO Malwarebytes and Super Antispyware are the first lines of defense today.

    Well... malware has become much better at morphing and hiding and corrupting common recovery tools, and nuking has become much easier. With Vista onwards it's probably easier to wipe and restore from backup.

    ronya on
    aRkpc.gif
Sign In or Register to comment.