[ryladine]

i had a malicious propgram/virus/adware? called antivirus pro 2010 and am still trying to get rid of its side effects.

upon start up windows complains that it cant find a file called lblens.dll its dir is C:\windows\lblens.dll , the error message opens opens repeatedly (stacking across the screen) eventually making the taskbar create multiple levels until i kill all unessential processes (this includes terminating rundll.32 which I'm fairly certain is somewhat important) I have tried replacing it with a fake but that didn't work, what should i do?

is there somewhere i can download said file?
is there something i can do to make windows ignore that its missing?
is it a vital windows file?
is it something anti virus pro 2010 installed? (which would indicate that i haven't completely removed it)

[TheOutcaste]

It not a Windows file. And since Google only finds that file name in your post, it's almost certainly par tof the virus.

The fact that it can't be found is good, but the error message means not all traces of the virus were removed.

• Go to Download HiJack This
• Click the Download HijackThis Installer link.
• Save HJTInstall.exe to your desktop.
• Double click on the HJTInstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Trend Micro\HijackThis
• Click Install
• Click the I Accept button on the License Agreement Window
• The Main Menu window will open
• Click on the Do a system scan and save a log file button.
• It will scan, save the log in C:\Program Files\Trend Micro\HijackThis, and then the log will open in Notepad.
• In Notepad, click on Format and make sure Word Wrap is unchecked
• In Notepad, click on Edit | Select All then click on Edit | Copy to copy the entire log.
• Paste the log in your next reply.(Click in the Reply window, press CTRL+V to paste)
• DO NOT have HijackThis fix anything yet. Most of what it finds is required or harmless.

Give as much information about the problem as you can.

• OS version and Service Pack installed
• Exact text of any error messages
• Any new Software or Hardware installed

Then, click the report button and ask for this thread to be moved to the Malware forum

From the Rules

Log Analysis/Malware Removal - In order to ensure that advice given to users is consistent and of the highest quality, those who wish to assist with security related matters must first graduate from one of the malware boot camp training universities or be approved by the administration as already being qualified. Those authorized to help with malware issues have a gold shield next to their name and authorized malware removal trainees have a blue shield next to their names. Anyone wishing to participate in a training program should contact a Moderator for more information.

* Be patient. The malware experts are very busy and will get to you. You can edit your post during the first 24 hours if you need to add anything you forgot. To edit your post, click the EDIT button by the post you want to edit. After 24 hours, simply reply to your post with the additional info. The number of replies is no longer used to indicate New posts.
Please wait at least 24 hours before bumping your post.

[ryladine]

i was wrong, it can be found but it cant open it (sorry it only occurs on start up and can be fixed by killing all rundll32 processes so i didn't get the error right)

[ryladine]

Ive attempted to download hijack this multiple times but it wont run when its done (this may be due to the virus again.... im not entirely certain i managed to be completely rid of it anymore) as it had been effecting .exe downloads, i thought i had it fixed but it seems to have reverted... i re-implemented the fix and was able to download a .exe (skype installer) but upon trying hijack this again came up with the same results, any suggestions?

[TheOutcaste]

Try this, from the HiJack Download page, right click the Executable link.
Choose Save Target As... (IE) or Save Link As... (FF)
Rename the file before starting the download to puppy.jpg and save it on your desktop.

Once downloaded, change the extension to .com, so the file is now puppy.com.

See if that will run, it might just sneak by that way

[ryladine]

its no good... I dont know how to change a jpg's file type so i downloaded it as a .txt and converted it from there... i tried .com and .exe neither would run.

also when i donwloaded it as a .txt and opened it so i could convert it, inside it it said

This program cannot be run in DOS mode.

and when i convert it to .com it makes it a ms dos application

is there anywhere i can download it as a torrent? they don't seem to be effected.

[ryladine]

also i just requested this be removed to the malware forum