Hello,

My windows XP professional, had an adware and I removed it. But now I am
getting an error at boot up that rmkbpaba.dll can not be found by
rundll.exe.



What is this file and how can I remove this error?



Regards

m.a wrote:

> Hello,
>
> My windows XP professional, had an adware and I removed it. But now I
> am
> getting an error at boot up that rmkbpaba.dll can not be found by
> rundll.exe.
>
> What is this file and how can I remove this error?

A quick Google for rmkbpaba.dll only brings up links to your post so this is
a strong indication the file was part of malware. Since you didn't say how
or with what you removed the malware, I can't tell whether your computer is
truly clean. Please review the removal methods at this link to see if you
were that thorough:

http://www.elephantboycomputers.com/...moving_Malware

If you were not, then you should run through at least some of the steps, not
skipping the prep work. If you were that thorough, manage your Startup
matrix with the System Configuration Utility and/or the free Autoruns.

http://www.microsoft.com/technet/sys...s/default.mspx - Autoruns

System Configuration Utility - Start>Run>msconfig [enter]

This brings up the System Configuration Utility. Look on the Startup tab and
find the probable culprit. Uncheck the box next to its name, Apply and OK
out. You don't need to restart immediately, but the next time you do you'll
get a dialog saying you've used the Utility. Just tick the box that says in
effect, "don't bother me about this again".

Important - Do not use the System Configuration Utility to stop processes.
Instead, use Start>Run>services.msc [enter] and do not stop any services
unless you really, really know what you're doing.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

"Malke" <malke@invalid.invalid> wrote in message
news:OoKKhHTfIHA.1212@TK2MSFTNGP05.phx.gbl...
> m.a wrote:
>
>> Hello,
>>
>> My windows XP professional, had an adware and I removed it. But now I
>> am
>> getting an error at boot up that rmkbpaba.dll can not be found by
>> rundll.exe.
>>
>> What is this file and how can I remove this error?
>
> A quick Google for rmkbpaba.dll only brings up links to your post so this
> is
> a strong indication the file was part of malware. Since you didn't say how
> or with what you removed the malware, I can't tell whether your computer
> is
> truly clean. Please review the removal methods at this link to see if you
> were that thorough:
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> If you were not, then you should run through at least some of the steps,
> not
> skipping the prep work. If you were that thorough, manage your Startup
> matrix with the System Configuration Utility and/or the free Autoruns.
>
> http://www.microsoft.com/technet/sys...s/default.mspx - Autoruns
>
> System Configuration Utility - Start>Run>msconfig [enter]
>
> This brings up the System Configuration Utility. Look on the Startup tab
> and
> find the probable culprit. Uncheck the box next to its name, Apply and OK
> out. You don't need to restart immediately, but the next time you do
> you'll
> get a dialog saying you've used the Utility. Just tick the box that says
> in
> effect, "don't bother me about this again".
>
> Important - Do not use the System Configuration Utility to stop processes.
> Instead, use Start>Run>services.msc [enter] and do not stop any services
> unless you really, really know what you're doing.
>
> Malke
> --
> MS-MVP
> Elephant Boy Computers
> www.elephantboycomputers.com
> Don't Panic!

Thanks,

I found the following dlls in my system and I removed them:

rmkbpaba.dll

hggffgd.dll

jcsysgen.dll

jkklm.dll



before removing them, I had popup in my IE even when it was not running. Now
I have not that side effects.



After removing these files, I did a windows XP repair install.



I am going to try to do your advice and find if there is any other malware
on my system.



Regards



ps: I removed theser files manually as no malware detection found them.

Boot to safe mode and run the adware removal scanner again.

"m.a" <ma.@spamoff.com> wrote in message
news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co. uk...
> Hello,
>
> My windows XP professional, had an adware and I removed it. But now I am
> getting an error at boot up that rmkbpaba.dll can not be found by
> rundll.exe.
>
>
>
> What is this file and how can I remove this error?
>
>
>
> Regards
>
>
>
>

"m.a" <ma.@spamoff.com> wrote in message
news:ScTyj.229921$3m6.49573@fe2.news.blueyonder.co .uk...
>
> "Malke" <malke@invalid.invalid> wrote in message
> news:OoKKhHTfIHA.1212@TK2MSFTNGP05.phx.gbl...
>> m.a wrote:
>>
>>> Hello,
>>>
>>> My windows XP professional, had an adware and I removed it. But now I
>>> am
>>> getting an error at boot up that rmkbpaba.dll can not be found by
>>> rundll.exe.
>>>
>>> What is this file and how can I remove this error?
>>
>> A quick Google for rmkbpaba.dll only brings up links to your post so this
>> is
>> a strong indication the file was part of malware. Since you didn't say
>> how
>> or with what you removed the malware, I can't tell whether your computer
>> is
>> truly clean. Please review the removal methods at this link to see if you
>> were that thorough:
>>
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> If you were not, then you should run through at least some of the steps,
>> not
>> skipping the prep work. If you were that thorough, manage your Startup
>> matrix with the System Configuration Utility and/or the free Autoruns.
>>
>> http://www.microsoft.com/technet/sys...s/default.mspx - Autoruns
>>
>> System Configuration Utility - Start>Run>msconfig [enter]
>>
>> This brings up the System Configuration Utility. Look on the Startup tab
>> and
>> find the probable culprit. Uncheck the box next to its name, Apply and OK
>> out. You don't need to restart immediately, but the next time you do
>> you'll
>> get a dialog saying you've used the Utility. Just tick the box that says
>> in
>> effect, "don't bother me about this again".
>>
>> Important - Do not use the System Configuration Utility to stop
>> processes.
>> Instead, use Start>Run>services.msc [enter] and do not stop any services
>> unless you really, really know what you're doing.
>>
>> Malke
>> --
>> MS-MVP
>> Elephant Boy Computers
>> www.elephantboycomputers.com
>> Don't Panic!
>
> Thanks,
>
> I found the following dlls in my system and I removed them:
>
> rmkbpaba.dll
>
> hggffgd.dll
>
> jcsysgen.dll
>
> jkklm.dll
>
>
>
> before removing them, I had popup in my IE even when it was not running.
> Now I have not that side effects.
>
>
>
> After removing these files, I did a windows XP repair install.
>
>
>
> I am going to try to do your advice and find if there is any other malware
> on my system.
>
>
>
> Regards
>
>
>
> ps: I removed theser files manually as no malware detection found them.
>
>

Hello,
I found that it relates to an entry in my windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
with the name of 20f3f088 with its value set to:
rundll32.exe "C:\WINDOWS\system32\rmkbpaba.dll",b


Regards

Thanks.
Which free malware removal software do you recomend?

I have windows defender. Is it any good?

Regards

"windmap" <windmap@gmail.com> wrote in message
news:%239stnYTfIHA.4376@TK2MSFTNGP05.phx.gbl...
> Boot to safe mode and run the adware removal scanner again.
>
> "m.a" <ma.@spamoff.com> wrote in message
> news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co. uk...
>> Hello,
>>
>> My windows XP professional, had an adware and I removed it. But now I
>> am
>> getting an error at boot up that rmkbpaba.dll can not be found by
>> rundll.exe.
>>
>>
>>
>> What is this file and how can I remove this error?
>>
>>
>>
>> Regards
>>
>>
>>
>>
>
>
>

Try Spyware Doctor www.pctools.com/spyware-doctor/

"m.a" <ma.@spamoff.com> wrote in message
news:vJTyj.229971$3m6.371@fe2.news.blueyonder.co.u k...
> Thanks.
> Which free malware removal software do you recomend?
>
> I have windows defender. Is it any good?
>
> Regards
>
> "windmap" <windmap@gmail.com> wrote in message
> news:%239stnYTfIHA.4376@TK2MSFTNGP05.phx.gbl...
>> Boot to safe mode and run the adware removal scanner again.
>>
>> "m.a" <ma.@spamoff.com> wrote in message
>> news:NBRyj.79809$jH4.16290@fe1.news.blueyonder.co. uk...
>>> Hello,
>>>
>>> My windows XP professional, had an adware and I removed it. But now I
>>> am
>>> getting an error at boot up that rmkbpaba.dll can not be found by
>>> rundll.exe.
>>>
>>>
>>>
>>> What is this file and how can I remove this error?
>>>
>>>
>>>
>>> Regards
>>>
>>>
>>>
>>>
>>
>>
>>
>
>

m.a wrote:
> Thanks,
>
> I found the following dlls in my system and I removed them:
>
> rmkbpaba.dll
>
> hggffgd.dll
>
> jcsysgen.dll
>
> jkklm.dll
>
> before removing them, I had popup in my IE even when it was not running.
> Now I have not that side effects.

> After removing these files, I did a windows XP repair install.

> ps: I removed theser files manually as no malware detection found them.

You have a Vundo infection. If no malware detection removed it, then you
didn't follow the malware removal steps I recommended to you. It is
extremely doubtful that the Repair Install or simply deleting the files
manually removed Vundo since most variants respawn.

At this point you should do what I suggested and register at one of the
specialty forums listed below. You'll run HijackThis and post your log
there - *not* here, please.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/foru...howtutorial=42 - another
tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!