awtrOhHy.dll

[boris-badenough]

Hi,

Whenever my son's VistaHomePremium starts up, he gets the message:

Error Loading C:\Users\HisName\AppData\Local\Temp\awtrOhHY.dll.
The specific module could not be found.

We always "OK" out of the error box, and things seem to be fine.

If I navigate to that location, that file is not there.

If I search the registry, in this key:

HKEY_USERS\S-1-5-21-1394185295-47774998-2189008627-1000\Software
\Windows\CurrentVersion\Run

(Is this something in a restore file?)

I find:

rundll32.exe C:\Users\Dad\AppData\Local\Temp\awtrOhHY.dll,c

I suspect that it may be a remnant of something left over during a
virus removal. I think it may be related to the Vundo virus, but I'm
not sure. I'm not even sure if his machine had the Vundo virus. I
only know that it gets scanned regularly, and is set to automatically
remove viruses.

I've saved a copy of the registry to desktop, so I'm tempted to just
eliminate this line in the registry and reboot to see what happens.

Any advice?

Thanks.

 

[boris-badenough]

Hi,

Whenever my son's VistaHomePremium starts up, he gets the message:

Error Loading C:\Users\HisName\AppData\Local\Temp\awtrOhHY.dll.
The specific module could not be found.

We always "OK" out of the error box, and things seem to be fine.

If I navigate to that location, that file is not there.

If I search the registry, in this key:

HKEY_USERS\S-1-5-21-1394185295-47774998-2189008627-1000\Software
\Windows\CurrentVersion\Run

(Is this something in a restore file?)

I find:

rundll32.exe C:\Users\Dad\AppData\Local\Temp\awtrOhHY.dll,c

I suspect that it may be a remnant of something left over during a
virus removal.  I think it may be related to the Vundo virus, but I'm
not sure.  I'm not even sure if his machine had the Vundo virus.  I
only know that it gets scanned regularly, and is set to automatically
remove viruses.

I've saved a copy of the registry to desktop, so I'm tempted to just
eliminate this line in the registry and reboot to see what happens.

Any advice?

Thanks.

I also find it at:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

 

[boris-badenough]

From: <[email protected]>

| Hi,

| Whenever my son's VistaHomePremium starts up, he gets the message:

| Error Loading C:\Users\HisName\AppData\Local\Temp\awtrOhHY.dll.
| The specific module could not be found.

| We always "OK" out of the error box, and things seem to be fine.

| If I navigate to that location, that file is not there.

| If I search the registry, in this key:

| HKEY_USERS\S-1-5-21-1394185295-47774998-2189008627-1000\Software
| \Windows\CurrentVersion\Run

| (Is this something in a restore file?)

| I find:

| rundll32.exe C:\Users\Dad\AppData\Local\Temp\awtrOhHY.dll,c

| I suspect that it may be a remnant of something left over during a
| virus removal.  I think it may be related to the Vundo virus, but I'm
| not sure.  I'm not even sure if his machine had the Vundo virus.  I
| only know that it gets scanned regularly, and is set to automatically
| remove viruses.

| I've saved a copy of the registry to desktop, so I'm tempted to just
| eliminate this line in the registry and reboot to see what happens.

| Any advice?

| Thanks.

Remove the line from the Registry Run location.

It worked. Thank you.

 

[Buffalo]

I also find it at:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Well, that line is what tries to run the program, so why don't you delete it
there also.