dll file problem

[Guest arfy1928]

This is an addendum to question from arfy1928 of 7-6-2008 to list the .dll

file. WINDOWS\system32\oklnccdr.dll

Thanks

[Guest PA Bear [MS MVP]]

Re: dll file problem

 

Post all replies to the original thread, please.

 

oklnccdr.dll is not a valid Windows file.

 

Unexplained computer behavior may be caused by deceptive software

http://support.microsoft.com/kb/827315

 

Run a /thorough/ check for hijackware, including posting your hijackthis log

to an appropriate forum.

 

Checking for/Help with Hijackware

http://aumha.org/a/parasite.htm

http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=5878

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

http://mvps.org/winhelp2002/unwanted.htm

http://inetexplorer.mvps.org/data/prevention.htm

http://inetexplorer.mvps.org/tshoot.html

http://www.mvps.org/sramesh2k/Malware_Defence.htm

http://defendingyourmachine2.blogspot.com/

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

When all else fails, HijackThis v2.0.2

(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.

It will help you to both identify and remove any hijackware/spyware with

assistance from an expert. **Post your log to

http://aumha.net/viewforum.php?f=30,

http://forums.spybot.info/forumdisplay.php?f=22,

http://castlecops.com/forum67.html, or other appropriate forums for review

by an expert in such matters, not here.**

 

If the procedures look too complex - and there is no shame in admitting this

isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA) computer repair shop.

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.net/

 

 

arfy1928 wrote:

> This is an addendum to question from arfy1928 of 7-6-2008 to list the .dll

> file. WINDOWS\system32\oklnccdr.dll

> Thanks

[Guest Nepatsfan]

Re: dll file problem

 

"arfy1928" <arfy1928@discussions.microsoft.com> wrote in message

news:C7112372-8913-4CCE-BAAC-37C82DA3D570@microsoft.com...

> This is an addendum to question from arfy1928 of 7-6-2008 to list the .dll

> file. WINDOWS\system32\oklnccdr.dll

> Thanks

 

Did you run an antivirus or antispyware scan recently on this computer? The

behavior you describe is usually what happens when an antivirus or

antispyware program identifies a file as malware, deletes the file, but doesn't

clean up the mechanism that launches the malware at startup.

 

Here's a program from Microsoft that will help you stop the error messages.

 

AutoRuns for Windows v9.21

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

 

Once you've downloaded and extracted the files, run autoruns.exe.

Look on the Everything tab for an entry that lists oklnccdr.dll in the Image

path

column.

Right click on that entry and select Search Online from the menu.

Odds are that you'll come up with an empty search. This pretty much confirms

that it was some type of malware that your scan deleted.

Uncheck the item.

Restart your computer. If you no longer see the error message, you can go back

and delete the entry in Autoruns.

 

Just to be on the safe side, you might consider taking steps to make sure the

system is malware free. Here's a site with general instructions on cleaning a

computer.

 

Courtesy of Malke Routh, MS-MVP

http://www.elephantboycomputers.com/page2.html#Viruses_Malware

 

Good luck

 

Nepatsfan

[Guest nass]

RE: dll file problem

 

 

 

"arfy1928" wrote:

> This is an addendum to question from arfy1928 of 7-6-2008 to list the .dll

> file. WINDOWS\system32\oklnccdr.dll

> Thanks

 

Your Anti-virus removed the viral infection but still in the Root

system and on the Registry, please perform the cleaning steps to make sure

nothing lurking in the background to revive the infestation back to action!.

 

Unexplained computer behaviour may be caused by deceptive software

http://support.microsoft.com/kb/827315

 

Go through these Cleaning steps:

1... First, try to clean up your caches, Internet files and delete cookies

by doing this:

Click Start >> Control Panel >> Double click Network and Internet

Connections >> Double click Internet Options.

On the IE properties windows you will see these Tabs:

General | Security | Privacy | Content | Connections | Programs |

Advanced

Under General Tab clear your History, Internet Files and Cookies.

Then click on Advanced tab and scroll down to under the Browsing Option:

[&] Browsing

[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.

Then click on Programs Tab and click Manage Add-Ons and Disable all non

Verified Add-Ons (You should Renable them later one-by-one and see the

culprit and update it or remove it.

How to manage Add-Ons:

http://support.microsoft.com/kb/883256

Scan for malware from here:

http://onecare.live.com/site/en-gb/default.htm?s_cid=sah

http://onecare.live.com/standard/en-gb/default.htm

 

RootkitRevealer v1.71

By Bryce Cogswell and Mark Russinovich

http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

 

 

Run a scan from here on-line:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Download Avast Cleaner (offline scanner) from here:

http://www.avast.com/eng/avast-virus-cleaner.html

 

You can download this tool "AutoRuns for Windows"

http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx

And remove the entry from here:

 

Locate this key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in

the right pane/window and remove the entry for it

"C:\Windows\System32\oklnccdr.dll ".

 

Run disk cleanup and defrag in safe mode. Then run this command:

sfc /scannow

 

HTH.

nass

---

http://www.nasstec.co.uk