1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

What is this?

Discussion in 'Virus & Other Malware Removal' started by catmad, Jan 9, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. catmad

    catmad Guest Thread Starter

    Joined:
    Jan 9, 2011
    Messages:
    6
    I use CC to organize my start up and have noticed this entry. I have no idea what it is or if it's safe. Can anyone explain it please? Yes HKCU:Run Qcihunqpx rundll32 "C:\Users\user\AppData\Roaming\vi-VN6.dll",tysnpn
     
  2. elee

    elee

    Joined:
    Dec 19, 2004
    Messages:
    91
    It's a Basic 6 dll. Export the key and then delete it. Also, rename the vi-VN6.dll to vi-VN6.bak.
    If nothing untoward occurs you're ok. If errors pop up read carefully and post.
     
  3. catmad

    catmad Guest Thread Starter

    Joined:
    Jan 9, 2011
    Messages:
    6
    Thanks elee, but I don't know how to export the key. Sorry but that's way over my head.
     
  4. elee

    elee

    Joined:
    Dec 19, 2004
    Messages:
    91
    Back up your registry with ERUNT (download from http://www.larshederer.homepage.t-online.de/erunt/).
    Open the registry with run regedit. Steer to the key or do a search for vi-VN6.dll. When you find the key choose registry -> export registry file. After naming the export file delete the key and close regedit.
    If anything goes wrong on the edit the registry can be restored with ERUNT.
     
  5. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    that is NOT a vb entry it is malware
    moved to malware cleaning forum
    follow advice here and post the logs those programs make
     
  6. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    elee
    you are not authorised for malware advice or removal help
    it should be obvious to you that when a post is in security, it is likely to be malware related
    Before you answer in future, please make sure you do know what you are advising about. Your fix would have just hidden the start up entry for that 1 part of this malware and left the rest to do its nefarious deeds
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/973573

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice