Jump to content

Need advice on RunDll error loading problem...


Recommended Posts

Guest Ron1Vista
Posted

Could anyone advise me on how to get rid of a annoying message which

happens every time on start up.

 

RunDll/error loading

 

C:/users/NAME~1/AppData/local/temp/ssqQgDtr.dll

 

module not found

 

Now everything else on my laptop is working wonderfully loving my vista

experience. Have been using mac for years and can only find this as my

only annoyance with vista can anybody help me, would very much welcome

your guidance in this matter thanking you inadvance.

 

 

--

Ron1Vista

Posted

Ron1Vista wrote:

<span style="color:blue">

>

> Could anyone advise me on how to get rid of a annoying message which

> happens every time on start up.

>

> RunDll/error loading

>

> C:/users/NAME~1/AppData/local/temp/ssqQgDtr.dll

>

> module not found

>

> Now everything else on my laptop is working wonderfully loving my vista

> experience. Have been using mac for years and can only find this as my

> only annoyance with vista can anybody help me, would very much welcome

> your guidance in this matter thanking you inadvance.</span>

 

A Google search for "ssqQgDtr.dll" brought up nothing. When you don't get

any hits for a file name on Google, chances are high that it is a malware

file. Either you uninstalled the malware program or your

antivirus/antispyware program did. In any case, a reference was left to the

file in Startup. You can remove the reference by managing your Startup.

 

Because you had one piece of malware, the chances are also high that you had

others. It would be a good idea to scan. I recommend downloading and

installing MalwareBytes' Antimalware (MBAM) from

http://www.malwarebytes.org. The program is free. (There is a paid version

but you don't need to buy it to remove malware.)

 

Manage Startup:

 

Start Orb>Search box>type: msconfig and when it appears in the Results box

above, right-click and choose "Run as Administrator".

 

If you are prompted for an administrator password or for a confirmation,

type the password, or click Continue. Then see what is on the Startup tab.

You don't need to restart immediately, but the next time you do you'll get

a dialog saying you've used the Utility. Usually in Vista this will be

blocked by Windows Defender and you'll need to allow it so you can then

tick the box that says in effect, "don't bother me about this again".

 

The free Autoruns program is very useful for managing your Startup -

http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

 

Malke

--

MS-MVP

Elephant Boy Computers - Don't Panic!

FAQ - http://www.elephantboycomputers.com/#FAQ

Posted

Hello Ron1Vista,

 

What Malke said. Also see...

 

Cleaning a Compromised System

<http://www.microsoft.com/technet/community/columns/secmgmt/sm0504.mspx>

 

Good luck and a Happy Holiday's

-=-

 

"Ron1Vista" wrote:

<span style="color:blue">

>

> Could anyone advise me on how to get rid of a annoying message which

> happens every time on start up.

>

> RunDll/error loading

>

> C:/users/NAME~1/AppData/local/temp/ssqQgDtr.dll

>

> module not found

>

> Now everything else on my laptop is working wonderfully loving my vista

> experience. Have been using mac for years and can only find this as my

> only annoyance with vista can anybody help me, would very much welcome

> your guidance in this matter thanking you inadvance.

>

>

> --

> Ron1Vista

> </span>

  • 2 weeks later...
Guest Sam Hobbs
Posted

Probably this problem has been resolved but I would like to make some

comments anyway.

 

Note that "C:/users/NAME~1/AppData/local/temp" is a temporary directory. I

think it is probable that the problem is simply the result of a mistake. If

it were malware then it is not very good since it would be detected so

easily. Malware would be quite ineffective if it were so obvious.

 

It is certainly best to be sure, so doing what was suggested previously

would be worthwhile and would only require your time.

 

 

"Ron1Vista" <guest@unknown-email.com> wrote in message

news:66162ccae943ccbad02f97d5404db7dc@nntp-gateway.com...<span style="color:blue">

>

> Could anyone advise me on how to get rid of a annoying message which

> happens every time on start up.

>

> RunDll/error loading

>

> C:/users/NAME~1/AppData/local/temp/ssqQgDtr.dll

>

> module not found

>

> Now everything else on my laptop is working wonderfully loving my vista

> experience. Have been using mac for years and can only find this as my

> only annoyance with vista can anybody help me, would very much welcome

> your guidance in this matter thanking you inadvance.

>

>

> --

> Ron1Vista </span>

Guest FromTheRafters
Posted

"Sam Hobbs" <Gateremovethis@SamHobbs.org> wrote in message

news:uNGdyyTbJHA.1676@TK2MSFTNGP03.phx.gbl...<span style="color:blue">

> Probably this problem has been resolved but I would like to make some

> comments anyway.

>

> Note that "C:/users/NAME~1/AppData/local/temp" is a temporary directory. I

> think it is probable that the problem is simply the result of a mistake.

> If it were malware then it is not very good since it would be detected so

> easily. Malware would be quite ineffective if it were so obvious.</span>

 

It would only be this obvious when it is broken - maybe this is a

result of incomplete removal of something more sophisicated than

you imagine.

Guest Sam Hobbs
Posted

"FromTheRafters" <erratic@nomail.afraid.org> wrote in message

news:OOUIhpUbJHA.4664@TK2MSFTNGP06.phx.gbl...<span style="color:blue">

>

> "Sam Hobbs" <Gateremovethis@SamHobbs.org> wrote in message

> news:uNGdyyTbJHA.1676@TK2MSFTNGP03.phx.gbl...<span style="color:green">

>> Probably this problem has been resolved but I would like to make some

>> comments anyway.

>>

>> Note that "C:/users/NAME~1/AppData/local/temp" is a temporary directory.

>> I think it is probable that the problem is simply the result of a

>> mistake. If it were malware then it is not very good since it would be

>> detected so easily. Malware would be quite ineffective if it were so

>> obvious.</span>

>

> It would only be this obvious when it is broken - maybe this is a

> result of incomplete removal of something more sophisicated than

> you imagine.</span>

 

When I say obvious, I agree that it might not be obvious to non-technical

users. It is likely to be obvious to technical people, especially those

eager to catch stuff like that.

 

Certainly it might be "incomplete removal of something" but if so then that

would likely not be the result of malware; malware would not remove itself.

If it is the result of malware installing itself then that is the type of

thing that would be obvious to technical people looking for stuff such as

that.

Guest FromTheRafters
Posted

inline

"Sam Hobbs" <Gateremovethis@SamHobbs.org> wrote in message

news:eXM6dMVbJHA.2584@TK2MSFTNGP04.phx.gbl...<span style="color:blue">

>

> "FromTheRafters" <erratic@nomail.afraid.org> wrote in message

> news:OOUIhpUbJHA.4664@TK2MSFTNGP06.phx.gbl...<span style="color:green">

>>

>> "Sam Hobbs" <Gateremovethis@SamHobbs.org> wrote in message

>> news:uNGdyyTbJHA.1676@TK2MSFTNGP03.phx.gbl...<span style="color:darkred">

>>> Probably this problem has been resolved but I would like to make some

>>> comments anyway.

>>>

>>> Note that "C:/users/NAME~1/AppData/local/temp" is a temporary directory.

>>> I think it is probable that the problem is simply the result of a

>>> mistake. If it were malware then it is not very good since it would be

>>> detected so easily. Malware would be quite ineffective if it were so

>>> obvious.</span>

>>

>> It would only be this obvious when it is broken - maybe this is a

>> result of incomplete removal of something more sophisicated than

>> you imagine.</span>

>

> When I say obvious, I agree that it might not be obvious to non-technical

> users. It is likely to be obvious to technical people, especially those

> eager to catch stuff like that.</span>

 

Not if it was stealthed while the malware was active. Well...you

would have to be a very good technical person to be able to see

a sophisticated rootkit.

<span style="color:blue">

> Certainly it might be "incomplete removal of something" but if so then

> that would likely not be the result of malware; malware would not remove

> itself.</span>

 

Obviously, which is why I suggested no such thing.

<span style="color:blue">

> If it is the result of malware installing itself then that is the type of

> thing that would be obvious to technical people looking for stuff such as

> that.</span>

 

It could be just one facet of the malware - maybe some guardian program

to assure other aspects are up-and-running (who knows?).

 

Just because it is obvious now does not mean it would be obvious while

the malware was fully operational. A new malware could utilize several

guardian programs using several loading methods and a user could use

a removal program (or manual method) for an older version which didn't

'know' about this particular loading method.

Guest Sam Hobbs
Posted

"FromTheRafters" <erratic@nomail.afraid.org> wrote in message

news:u$QBotabJHA.4080@TK2MSFTNGP02.phx.gbl...<span style="color:blue">

>

> you

> would have to be a very good technical person to be able to see

> a sophisticated rootkit.</span>

 

Malware that had evidence as obvious as the one being discussed would not be

a sophisticated root kit.

 

We are at the point of repeating ourselves, so I will likely not respond

again in this thread. You can make a final comment; I assume you need to do

that.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...