REVscene Automotive Forum - View Single Post

syee · 03-31-2009, 07:35 AM

O4 - HKLM\..\Run: [Qqamu] rundll32.exe "CWINDOWS\Ojilacehezusuq.dll",e
O4 - HKLM\..\Run: [Ccapizajovanile] rundll32.exe "CWINDOWS\aziviyiyimevoco.dll",e
O4 - HKLM\..\Run: [Bar] CWINDOWS\TEMP\888HF8u5.exe

Those lines look suspicious. The names look suspiciously like trojans/malware. Could be a browser hijack, although Malwarebytes usually can detect those.

Try back up HKLM\Software\Microsoft\Windows\CurrentVersion\Run registry first and then delete those three entries and reboot.

See if IE works after that.

Also, the spelling of regedit is wrong. You left out the e which is why it didn't work.

03-31-2009, 07:35 AM	#16
syee I subscribe to the Revscene NWS thread(s) Join Date: Jan 2007 Location: Vancouver Posts: 2,654 Thanked 331 Times in 242 Posts Failed 11 Times in 6 Posts	O4 - HKLM\..\Run: [Qqamu] rundll32.exe "CWINDOWS\Ojilacehezusuq.dll",e O4 - HKLM\..\Run: [Ccapizajovanile] rundll32.exe "CWINDOWS\aziviyiyimevoco.dll",e O4 - HKLM\..\Run: [Bar] CWINDOWS\TEMP\888HF8u5.exe Those lines look suspicious. The names look suspiciously like trojans/malware. Could be a browser hijack, although Malwarebytes usually can detect those. Try back up HKLM\Software\Microsoft\Windows\CurrentVersion\Run registry first and then delete those three entries and reboot. See if IE works after that. Also, the spelling of regedit is wrong. You left out the e which is why it didn't work.