What is this?

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

catmad

Thread Starter
Guest
Joined
Jan 9, 2011
Messages
6
I use CC to organize my start up and have noticed this entry. I have no idea what it is or if it's safe. Can anyone explain it please? Yes HKCU:Run Qcihunqpx rundll32 "C:\Users\user\AppData\Roaming\vi-VN6.dll",tysnpn
 
Joined
Dec 19, 2004
Messages
91
It's a Basic 6 dll. Export the key and then delete it. Also, rename the vi-VN6.dll to vi-VN6.bak.
If nothing untoward occurs you're ok. If errors pop up read carefully and post.
 

catmad

Thread Starter
Guest
Joined
Jan 9, 2011
Messages
6
Thanks elee, but I don't know how to export the key. Sorry but that's way over my head.
 
Joined
Dec 19, 2004
Messages
91
Back up your registry with ERUNT (download from http://www.larshederer.homepage.t-online.de/erunt/).
Open the registry with run regedit. Steer to the key or do a search for vi-VN6.dll. When you find the key choose registry -> export registry file. After naming the export file delete the key and close regedit.
If anything goes wrong on the edit the registry can be restored with ERUNT.
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
that is NOT a vb entry it is malware
moved to malware cleaning forum
follow advice here and post the logs those programs make
 

dvk01

Derek
Retired Moderator Retired Malware Specialist
Joined
Dec 14, 2002
Messages
56,452
elee
you are not authorised for malware advice or removal help
it should be obvious to you that when a post is in security, it is likely to be malware related
Before you answer in future, please make sure you do know what you are advising about. Your fix would have just hidden the start up entry for that 1 part of this malware and left the rest to do its nefarious deeds
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top