downloads
 drivers & firmware


PDA

View Full Version : Phantom .dll file


   
 
 
tlcompany
02-20-2005, 08:03 AM
While troubleshooting a client's PC and removing variuos hidden spywear and hijackers, there is this search toolbar that I can't seem to be able to remove. (begin2search.com bar) I have removed all known autostarters, autoloaders and .exe files that I found in the registry HKEY_Local_machine and the bar remains. While searching through the system32 folder, I discover a suspect .dll that didn't seem to be associated to any necessary software. The file is (vcd7rdo.dll) I have tried frantically to remove the file and continue to get the "no can do thing" so I shut down all processes that I knew not to be system processes and still could not remove the file. So I am attempting to find out if anyone knows the softwear this file is associated with or knows how I can find out. I'm sure that this file is the culperate that is keeping the unwanted searchbar alive. The bad thing is I believe that this particular searchbar has an autodownloader associated with it, which is why I believe the PC keeps getting re-infected with hijackers, spywear and trojans.

Jerry K
02-21-2005, 04:09 AM
There's a few spyware removers available that should take care of the problem file... Hijack This is a starter, Spybot and Adaware should take care of after-cleanup pesks that still remain.

http://hijack-this.net/

http://www.safer-networking.org/en/index.html

http://www.lavasoftusa.com/software/adaware/

There's several specialized forums for posting HiJack This log files that result in specific removal procedures if help is needed. (links below)

http://www.bullguard.com/forum/

http://forum.tweakxp.com/forum/shwmessage.aspx?ForumID=29&MessageID=136161

SaberTooth
03-11-2005, 01:27 AM
Assuming you 've tried to remove this in SAFEMODE; Did you try SFC and do an Extract One File(the one you have created by RENAMING a blank document file to vcd7rdo.dll in the SFC folder) and click OK to restart?