Jump to content


Photo

Can't delete MQUTWXK.DLL.


  • This topic is locked This topic is locked
7 replies to this topic

#1 domenic15

domenic15

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 09 July 2004 - 08:58 PM

This file can not be deleted in the start-up. I can remove it, but it always comes back. I have tried it in regular and safe mode.

Operating system is XP Home

Highjack This lists it as 04-----C:\windows\system32;MQUTWXK.DLL

It also deletes it but always returns. I tried to locate the file after "show all files and folders", uncheck "hide file extensions for known file types" and also uncheck "hide protected operating system files."

Any ideas?

Edited by domenic15, 09 July 2004 - 08:59 PM.


#2 dave38

dave38

    Devout Murphyite!

  • Retired Staff
  • PipPipPipPipPip
  • 8,508 posts

Posted 10 July 2004 - 05:38 AM

Yes., I think I have, but i need to see the complete log. Please post it for checking.
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum

#3 domenic15

domenic15

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 10 July 2004 - 06:38 AM

I don't have the ability to post the exact log because the machine is not here. I do remember that I already cleaned everything up from the log, except for a few valid items. The mqutwxk.dll line actually is present in the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and Run- or RunOnce.
Those are the only places on the entire machine. Nothing else is running so there must be another .dll or .exe in the system32 folder under a different name recreating it. If I delete those two keys, leave and reenter, they come back. Normal or safe mode, same thing. I did a search for that .dll and can't find anything about it at all. It always returns as the same name, no deviation.

#4 dave38

dave38

    Devout Murphyite!

  • Retired Staff
  • PipPipPipPipPip
  • 8,508 posts

Posted 10 July 2004 - 07:47 AM

If the entry ends init 1, then it is the Aflooder Trojan.

To remove, go to start>run.
type CMD (enter)
in the window that opens, paste the bold text below, and press enter.

rundll32 C:\windows\system32;MQUTWXK.DLL,Uninstall.

Reboot, and you should then be able to delete the file.
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum

#5 domenic15

domenic15

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 11 July 2004 - 09:24 AM

Thanks, I will give it a try on Monday and let you know.

#6 domenic15

domenic15

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 12 July 2004 - 09:51 AM

When I run the above cut and paste at a command prompt in either regular or safe mode, a message comes up saying that module does not exit. When I do a search in the registry, it appears in run and also runonce. I can delete the key but once I reenter run and runonce it returns.

#7 domenic15

domenic15

    Member

  • Full Member
  • Pip
  • 6 posts

Posted 12 July 2004 - 01:02 PM

Ok, I went back and redid the instructions from above and this time I made sure that the command was case sensitive. After doing so, it finally worked. I had typed uninstall not Uninstall
Thanks

#8 dave38

dave38

    Devout Murphyite!

  • Retired Staff
  • PipPipPipPipPip
  • 8,508 posts

Posted 12 July 2004 - 03:32 PM

Glad to help!

If you need this topic reopened, please request this by sending the moderating team an email with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
Be wary of strong drink. It may make you shoot at tax collectors, and miss!
Please support SWI forum




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of

Support SpywareInfo Forum - click the button
PayPal - The safer, easier way to pay online!