what is rmkbpaba.dll

[Guest m.a]

Hello,

 

My windows XP professional, had an adware and I removed it. But now I am

getting an error at boot up that rmkbpaba.dll can not be found by

rundll.exe.

 

 

 

What is this file and how can I remove this error?

 

 

 

Regards

[Guest Malke]

Re: what is rmkbpaba.dll

 

m.a wrote:

> Hello,

>

> My windows XP professional, had an adware and I removed it. But now I

> am

> getting an error at boot up that rmkbpaba.dll can not be found by

> rundll.exe.

>

> What is this file and how can I remove this error?

 

A quick Google for rmkbpaba.dll only brings up links to your post so this is

a strong indication the file was part of malware. Since you didn't say how

or with what you removed the malware, I can't tell whether your computer is

truly clean. Please review the removal methods at this link to see if you

were that thorough:

 

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

If you were not, then you should run through at least some of the steps, not

skipping the prep work. If you were that thorough, manage your Startup

matrix with the System Configuration Utility and/or the free Autoruns.

 

http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

 

System Configuration Utility - Start>Run>msconfig [enter]

 

This brings up the System Configuration Utility. Look on the Startup tab and

find the probable culprit. Uncheck the box next to its name, Apply and OK

out. You don't need to restart immediately, but the next time you do you'll

get a dialog saying you've used the Utility. Just tick the box that says in

effect, "don't bother me about this again".

 

Important - Do not use the System Configuration Utility to stop processes.

Instead, use Start>Run>services.msc [enter] and do not stop any services

unless you really, really know what you're doing.

 

Malke

--

MS-MVP

Elephant Boy Computers

http://www.elephantboycomputers.com

Don't Panic!

[Guest m.a]

Re: what is rmkbpaba.dll

 

 

"Malke" <malke@invalid.invalid> wrote in message

news:OoKKhHTfIHA.1212@TK2MSFTNGP05.phx.gbl...

> m.a wrote:

>

>> Hello,

>>

>> My windows XP professional, had an adware and I removed it. But now I

>> am

>> getting an error at boot up that rmkbpaba.dll can not be found by

>> rundll.exe.

>>

>> What is this file and how can I remove this error?

>

> A quick Google for rmkbpaba.dll only brings up links to your post so this

> is

> a strong indication the file was part of malware. Since you didn't say how

> or with what you removed the malware, I can't tell whether your computer

> is

> truly clean. Please review the removal methods at this link to see if you

> were that thorough:

>

> http://www.elephantboycomputers.com/page2.html#Removing_Malware

>

> If you were not, then you should run through at least some of the steps,

> not

> skipping the prep work. If you were that thorough, manage your Startup

> matrix with the System Configuration Utility and/or the free Autoruns.

>

> http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

>

> System Configuration Utility - Start>Run>msconfig [enter]

>

> This brings up the System Configuration Utility. Look on the Startup tab

> and

> find the probable culprit. Uncheck the box next to its name, Apply and OK

> out. You don't need to restart immediately, but the next time you do

> you'll

> get a dialog saying you've used the Utility. Just tick the box that says

> in

> effect, "don't bother me about this again".

>

> Important - Do not use the System Configuration Utility to stop processes.

> Instead, use Start>Run>services.msc [enter] and do not stop any services

> unless you really, really know what you're doing.

>

> Malke

> --

> MS-MVP

> Elephant Boy Computers

> http://www.elephantboycomputers.com

> Don't Panic!

 

Thanks,

 

I found the following dlls in my system and I removed them:

 

rmkbpaba.dll

 

hggffgd.dll

 

jcsysgen.dll

 

jkklm.dll

 

 

 

before removing them, I had popup in my IE even when it was not running. Now

I have not that side effects.

 

 

 

After removing these files, I did a windows XP repair install.

 

 

 

I am going to try to do your advice and find if there is any other malware

on my system.

 

 

 

Regards

 

 

 

ps: I removed theser files manually as no malware detection found them.

[Guest windmap]

Re: what is rmkbpaba.dll

 

Boot to safe mode and run the adware removal scanner again.

 

"m.a" <ma.@spamoff.com> wrote in message

news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co.uk...

> Hello,

>

> My windows XP professional, had an adware and I removed it. But now I am

> getting an error at boot up that rmkbpaba.dll can not be found by

> rundll.exe.

>

>

>

> What is this file and how can I remove this error?

>

>

>

> Regards

>

>

>

>

[Guest m.a]

Re: what is rmkbpaba.dll

 

 

"m.a" <ma.@spamoff.com> wrote in message

news:ScTyj.229921$3m6.49573@fe2.news.blueyonder.co.uk...

>

> "Malke" <malke@invalid.invalid> wrote in message

> news:OoKKhHTfIHA.1212@TK2MSFTNGP05.phx.gbl...

>> m.a wrote:

>>

>>> Hello,

>>>

>>> My windows XP professional, had an adware and I removed it. But now I

>>> am

>>> getting an error at boot up that rmkbpaba.dll can not be found by

>>> rundll.exe.

>>>

>>> What is this file and how can I remove this error?

>>

>> A quick Google for rmkbpaba.dll only brings up links to your post so this

>> is

>> a strong indication the file was part of malware. Since you didn't say

>> how

>> or with what you removed the malware, I can't tell whether your computer

>> is

>> truly clean. Please review the removal methods at this link to see if you

>> were that thorough:

>>

>> http://www.elephantboycomputers.com/page2.html#Removing_Malware

>>

>> If you were not, then you should run through at least some of the steps,

>> not

>> skipping the prep work. If you were that thorough, manage your Startup

>> matrix with the System Configuration Utility and/or the free Autoruns.

>>

>> http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

>>

>> System Configuration Utility - Start>Run>msconfig [enter]

>>

>> This brings up the System Configuration Utility. Look on the Startup tab

>> and

>> find the probable culprit. Uncheck the box next to its name, Apply and OK

>> out. You don't need to restart immediately, but the next time you do

>> you'll

>> get a dialog saying you've used the Utility. Just tick the box that says

>> in

>> effect, "don't bother me about this again".

>>

>> Important - Do not use the System Configuration Utility to stop

>> processes.

>> Instead, use Start>Run>services.msc [enter] and do not stop any services

>> unless you really, really know what you're doing.

>>

>> Malke

>> --

>> MS-MVP

>> Elephant Boy Computers

>> http://www.elephantboycomputers.com

>> Don't Panic!

>

> Thanks,

>

> I found the following dlls in my system and I removed them:

>

> rmkbpaba.dll

>

> hggffgd.dll

>

> jcsysgen.dll

>

> jkklm.dll

>

>

>

> before removing them, I had popup in my IE even when it was not running.

> Now I have not that side effects.

>

>

>

> After removing these files, I did a windows XP repair install.

>

>

>

> I am going to try to do your advice and find if there is any other malware

> on my system.

>

>

>

> Regards

>

>

>

> ps: I removed theser files manually as no malware detection found them.

>

>

 

Hello,

I found that it relates to an entry in my windows

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

with the name of 20f3f088 with its value set to:

rundll32.exe "C:\WINDOWS\system32\rmkbpaba.dll",b

 

 

Regards

[Guest m.a]

Re: what is rmkbpaba.dll

 

Thanks.

Which free malware removal software do you recomend?

 

I have windows defender. Is it any good?

 

Regards

 

"windmap" <windmap@gmail.com> wrote in message

news:%239stnYTfIHA.4376@TK2MSFTNGP05.phx.gbl...

> Boot to safe mode and run the adware removal scanner again.

>

> "m.a" <ma.@spamoff.com> wrote in message

> news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co.uk...

>> Hello,

>>

>> My windows XP professional, had an adware and I removed it. But now I

>> am

>> getting an error at boot up that rmkbpaba.dll can not be found by

>> rundll.exe.

>>

>>

>>

>> What is this file and how can I remove this error?

>>

>>

>>

>> Regards

>>

>>

>>

>>

>

>

>

[Guest windmap]

Re: what is rmkbpaba.dll

 

Try Spyware Doctor http://www.pctools.com/spyware-doctor/

 

"m.a" <ma.@spamoff.com> wrote in message

news:vJTyj.229971$3m6.371@fe2.news.blueyonder.co.uk...

> Thanks.

> Which free malware removal software do you recomend?

>

> I have windows defender. Is it any good?

>

> Regards

>

> "windmap" <windmap@gmail.com> wrote in message

> news:%239stnYTfIHA.4376@TK2MSFTNGP05.phx.gbl...

>> Boot to safe mode and run the adware removal scanner again.

>>

>> "m.a" <ma.@spamoff.com> wrote in message

>> news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co.uk...

>>> Hello,

>>>

>>> My windows XP professional, had an adware and I removed it. But now I

>>> am

>>> getting an error at boot up that rmkbpaba.dll can not be found by

>>> rundll.exe.

>>>

>>>

>>>

>>> What is this file and how can I remove this error?

>>>

>>>

>>>

>>> Regards

>>>

>>>

>>>

>>>

>>

>>

>>

>

>

[Guest Malke]

Re: what is rmkbpaba.dll

 

m.a wrote:

> Thanks,

>

> I found the following dlls in my system and I removed them:

>

> rmkbpaba.dll

>

> hggffgd.dll

>

> jcsysgen.dll

>

> jkklm.dll

>

> before removing them, I had popup in my IE even when it was not running.

> Now I have not that side effects.

> After removing these files, I did a windows XP repair install.

> ps: I removed theser files manually as no malware detection found them.

 

You have a Vundo infection. If no malware detection removed it, then you

didn't follow the malware removal steps I recommended to you. It is

extremely doubtful that the Repair Install or simply deleting the files

manually removed Vundo since most variants respawn.

 

At this point you should do what I suggested and register at one of the

specialty forums listed below. You'll run HijackThis and post your log

there - *not* here, please.

 

http://aumha.org/downloads/hijackthis.zip

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn

http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 - another

tutorial

http://aumha.net/ - Click on the HijackThis forum. Read the announcement and

the stickies *first*.

http://www.atribune.org/forums/index.php?showforum=9

http://aumha.net/viewforum.php?f=30

http://www.bleepingcomputer.com/forums/forum22.html

http://castlecops.com/forum67.html

http://www.dslreports.com/forum/cleanup

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html

http://gladiator-antivirus.com/forum/index.php?showforum=170

http://spywarewarrior.com/viewforum.php?f=5

http://forums.techguy.org/54-security/

 

Malke

--

MS-MVP

Elephant Boy Computers

http://www.elephantboycomputers.com

Don't Panic!