Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Antivirus found infection in srrstr.dll

26 Jan 2012   #1
Zrpizzaguy

Windows 7 Home Premium 64 Bit
 
 
Antivirus found infection in srrstr.dll

Okay so I have been without a antivirus for quite a while and really needed one so I was able to get Kaspersky, after installing and updating I did a full system scan. In the scan it found 38 virus's thought it wasn't able to finish the scan due to a blue screen error. Of those 38 I was able to remove all except 1 which it said was the file srrstr.dll in my SysWOW64 folder. After finding that, I did some research and found out that the file srrstr.dll should actually be in System32 so I took a look in there and actualy found a second srrstr.dll file. So my question is, would it be wise to delete the srrstr.lll from my SysWOW64? Or would doing so actualy harm my computer even further.
If nessesary I can kill it with my File Assassin from MalwareBytes.


My System SpecsSystem Spec
.
26 Jan 2012   #2
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Hi,

Which virus were you infected with?

Regards,
Golden
My System SpecsSystem Spec
26 Jan 2012   #3
Zrpizzaguy

Windows 7 Home Premium 64 Bit
 
 

Umm a Trojan I believe. Basicly all it told me was Trojan.Win32.Searches.abv, then where it was.
My System SpecsSystem Spec
.

26 Jan 2012   #4
Golden
Microsoft MVP

Windows 7 Ult. x64
 
 

Hi,

It seems to be a variant of the Win32.Searches trojan which is known to be quite damaging. Here is a similar infection where the OP also reported srrstr.dll being flagged by Kaspersky:

Kaspersky Lab Forum > Kaspersky unable to remove Trojan.Win32.Searches.abt

Its unclear from the thread how they fixed the problem, or if they even did, so I would recommend the following:

- On a different clean PC, change all your passwords for any online forum/bank accounts etc.
- Do a format and clean install of your entire system to guarantee that the infection as been removed

Clean Install Windows 7

If you have an OEM Windows installation, you might be able to do a factory reset/recovery from the recovery partition/disks.

Regards,
Golden
My System SpecsSystem Spec
26 Jan 2012   #5
Zrpizzaguy

Windows 7 Home Premium 64 Bit
 
 

Hmmm, alright thanks. I'm not sure if I have a partition for that in my computer but I do have a recovery disk. Just was hoping to not have to lose everything but sometimes seems its just out of our control.

Just 1 more thing, would it not be wise then to possibly just delete it with my File Assassin from MalwareBytes?
My System SpecsSystem Spec
26 Jan 2012   #6
EKMantis

Windows 7 All Versions
 
 

I don't see why this needs to be a reload. I would try downloading and running tdsskiller from: Virus Removal Tools which does a great job at finding rootkits. If it finds anything, remove it and reboot. Repeat as necessary(You may have to turn off system restore to be successful). From there, Download and install Malwarebytes Antimalware and run that. Once that is completed, I would run Spybot S&D (I recommend unchecking the box for Teatimer during install) Finally, I would download and run the appropriate version of hitman pro for your os from: Downloads - SurfRight. If you are still having problems, I would try combofix which can be downloaded from bleepingcomputer.com, and eset's online virus scanner. Hope it helps!

-Mantis
My System SpecsSystem Spec
26 Jan 2012   #7
Zrpizzaguy

Windows 7 Home Premium 64 Bit
 
 

Thing is, iv used MalewareBytes, but the file is in both System32 where it should be, and SysWOW64. So i'm not entirely sure if its safe for deleting or not. If it was I would have used File Assassin a while ago.
My System SpecsSystem Spec
26 Jan 2012   #8
EKMantis

Windows 7 All Versions
 
 

If it is being detected as a virus in your syswow64 folder but not system32, then they are probably not really the same file. See if the file sizes match up, if they don't then delete the syswow64 one, if they do match and have the same modified date then delete them both and replace them with one from a windows disk. (If you need me to I can upload the file. I just need to know your windows version, service pack, and if it is 32 or 64 bit.

-Mantis
My System SpecsSystem Spec
26 Jan 2012   #9
Zrpizzaguy

Windows 7 Home Premium 64 Bit
 
 

Well I already know they aren't the same size, the one in System32 is somewhere in 200kb's, where as this one is 96kb's.
My System SpecsSystem Spec
26 Jan 2012   #10
EKMantis

Windows 7 All Versions
 
 

Then I would recommend that you file assassin the one in syswow64 and run the programs I specified in my original post. That should get you going fine.

-Mantis
My System SpecsSystem Spec
Reply

 Antivirus found infection in srrstr.dll




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
aswMBR 0.9.9 found a infection
Yeah so I was googling a problem I had with my fps in game randomly jumping somtimes and came of a thread on some other site. They suggested to run aswmbr from avast to see if there was any infections. Anyways it found something which i found surprising. What I would like to know,is what I can do...
System Security
Comodo AntiVirus or Kaspersky AntiVirus
Which of these is better? I'm currently using Kaspersky AV plus Comodo Firewall as noted in my sig.
System Security
rundll32.exe processing srrstr.dll?
Hi everyone. Just a quick question: Is anyone familiar with this phenomenon? I left my computer idle to work in the kitchen for about 25 min, and when I returned I found that rundll32.exe was running and processing something over and over again. I checked Process Explorer, and found it was running...
System Security
Process srrstr.dll
Hi, I have been having an issue lately with srrstr.dll that runs under rundll32 . This will randomly start doing whatever its trying to do and use up 25% of processor resources until I end the process through task manager. From what I found this has something to do with Windows trying to create a...
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 04:37.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App