Strange .dll-file interfering

[Bastus]

Hey 7Forums

When I woke up this morning and turned on my computer, two popups appeared: One from ESET SS4 telling me that C:\Users\*user*\AppData\Local\MORYRUs.dll was infected, one from Windows RunDLL telling me that the same file could not be loaded.
I googled the filename without luck and could not think of the usage, so I closed down rundll32.exe from my processes in the task manager and deleted MORYRUs.dll. I also launched CCleaner to clean up my registry files.

Now, each time I reboot I get the annoying popup from RunDLL, telling me that this file can't be accessed. How do I get rid of it?

It looks like this (in Danish):

It says that the module could not be found.


Thanks in advance and happy easter!

 

[fimble]

Have you tried un-registering the .dll file?

In run (or a command prompt) type regsvr32 /u C:\Path of\folders\dllname.dll

If there are any spaces in the path name you'll most likely need to use quote marks "" e.g.
regsvr32 /u "C:\Path of\folders\dllname.dll"

 

[wilywombat]

Hi Bastus, welcome to sevenforums, I suggest you do an online scan with Trend Housecall to get an independant antivirus scan, then download Malwarebytes Anti-Malware, allow it to update. Then carry out a full scan of your system. Please report back when completed and we can then advise further.

 

[Bastus]

Anti-Malware did it! I scanned with HouseCall which found 1 threat, but it was a false positive (keygen). Anti-Malware found 4 infected objects - 3 of them were keygens as well, but the fourth one was from the registry. I deleted it, rebooted and the popup didn't show up. Success! Thanks wily.

fimble, thanks, but I wasn't able to perform that command as I deleted the file.


Fast and great support, couldn't be better.

 

[wilywombat]

Great news!! Good luck.