Am I infected with trojan? help

alkaiden SG

When I start my computer today, theres a message saying

Windows cannot find C:\WINDOWS\rundl132.exe', make sure
you typed the name correctly, the retry again'

after i close this it says

'Windows cannot load or run C:\WINDOWS\rundl132.exe in your directory. Make sure it exist, or else remove the reference to it int he directory. To search for the file, click start, then click search'

then i did i search with AVG and a virus is detectedin my temp folder but i dont know how to deal with it...

alexkusu SG

nope..

alkaiden SG

uhh…then what is it? everytime i start my com, the msg will appear

alvin-ncs SG

me too Neutral

ndmmxiaomayi SG

http://www.bleepingcomputer.com/startups/not_used-15035.html

http://vil.nai.com/vil/content/v_100735.htm

http://www.sophos.com/security/analyses/w32inmotecda.html

Try letting AVG to clean it...

Exact location of rundll32 is C:\WINDOWS\system32 if you are using Windows XP. In caps, it looks like this: RUNDLL32

The L shouldn't be replaced by numbers...

alkaiden SG

thanks for the reply…is it ok if i juz delete rundl132 in the folder?

ndmmxiaomayi SG

If AVG can’t do it, you can delete it. Make sure it is quarantined before deleting.

kaobeikaobu SG

seems that it has also modified ur registry...
might have to remove it from registry as well