C:\Windows\System32\gzmrt.dll

T

The Colonel

Ok so everytime I open and IE windo I get a box that says that A website
wants to open web content using this program on this computer. This program
will open outside of Protected mode. Internet Explorer's Protected mode helps
protect your computer. If you do not trust this wesite, do not open this
program. Name: Windows host process (Rundll32) details:
C:\Windows\System32\gzmrt.dll" it states that there is a box that can be
click to not ask this message anymore but it is greayed out an I don't have
the option to select it. Can someone please help me with this problem.
 
S

Synapse Syndrome

The Colonel said:
Ok so everytime I open and IE windo I get a box that says that A website
wants to open web content using this program on this computer. This
program
will open outside of Protected mode. Internet Explorer's Protected mode
helps
protect your computer. If you do not trust this wesite, do not open this
program. Name: Windows host process (Rundll32) details:
C:\Windows\System32\gzmrt.dll" it states that there is a box that can be
click to not ask this message anymore but it is greayed out an I don't
have
the option to select it. Can someone please help me with this problem.


That's not your problem.

gzmrt.dll is spyware.

Run Ewido Online Scan or AntiSpyware

http://www.ewido.net/en/

ss.
 
M

Malke

The said:
Ok so everytime I open and IE windo I get a box that says that A website
wants to open web content using this program on this computer. This
program will open outside of Protected mode. Internet Explorer's Protected
mode helps protect your computer. If you do not trust this wesite, do not
open this program. Name: Windows host process (Rundll32) details:
C:\Windows\System32\gzmrt.dll" it states that there is a box that can be
click to not ask this message anymore but it is greayed out an I don't
have
the option to select it. Can someone please help me with this problem.

As Synapse Syndrome has told you, your computer is infected. Go through
these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode. Please see the special Notes regarding using
Multi_AV in Vista.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

Not all tools used will work in Vista and you will need to run them
elevated. If you are unable to remove the infection by following the
general steps, register at one of the HijackThis forums as suggested.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
 
A

alexB

Synaptic syndrome may ne right. It is NOT a Vista dll. Do not trust however
to what he said. Any AntiSpyware offer may be a Trojan horse, You never
know. As a matter of fact, I would be that most of so called 3-rd party
AntiSpyware applications are in fact spies in their own right.

Follow MS track.

Also watch their outrage after I posted that. They will say it is drivel,
etc. They want to protect their criminal activity. Watch out.

Read this:


My policy is not to use any 3-rd party anti-malware except Spybot S&D.
Windows Vista offers sufficient protection against malicious software
writers some of them I am sure watch this forum very carefully.

Download Microsoft Windows Baseline Security Analyzer. It is Beta 2.1 for
Vista and I think it is safe to download. Run it.

<http://www.microsoft.com/downloads/...AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en>

It will give you all your vulnerabilities, especially in your firewall
settings. You should read the report and if it suggests any changes, you
should consider them.
Your Windows firewall setting will be analyzed.

Download Microsoft® Windows® Malicious Software Removal Tool (KB890830). It
will want to run upon install. Choose the FULL scan although it may give you
a threatening message that it might take a few hours. It will scan your
entire computer in about half an hour or less if you do not have a lot of
stuff in it.

<http://www.microsoft.com/downloads/...e0-e72d-4f54-9ab3-75b8eb148356&displaylang=en>

Some reassuring information: Malicious Software Removal Tool
<http://www.microsoft.com/security/malwareremove/default.mspx>
The Microsoft Windows Malicious Software Removal Tool helps remove specific,
prevalent malicious software from computers that are running Windows Vista,
Windows Server 2003, Windows XP, or Windows 2000
http://support.microsoft.com/?kbid=890830

You can also go to Protection Center (Microsoft)
<http://onecare.live.com/site/en-US/center/howsafe.htm?s_cid=mscom_msrt>
and click "Protection Scan." There will be a dropdown menu and a button:
"Launch Full Scan or Vista." You can do it if you wish.

Download and install Spybot Search & Destroy, a great piece of software
which is free for individuals but corporations pay fees. You may be asked
for donations but it is up to you. It is very up to date and every week you
will have to download new updates, sometimes even more often. You should
check for updates every time you run it. It will give you all su*kers
leached into your registry and ask you if you wanted to remove them. Many of
them have masqueraded themselves under MS Windows names like
Windows.something. Do not hesitate to kill them all. You can trust SB S&D.

http://www.spybot.info/en/index.html
http://www.spybot.info/en/spybotsd/index.html

It also allows you to IMMUNIZE your system. It means that when you go to a
website and they try to download some kind of a Trojan to you SB S&D will
either kill it silently, or ask you if you want to do it or will kill it and
give you a notice. It is better to let it kill them all in silence.

Exerpts from SB S&D website

<quote starts>
Spybot - Search & Destroy detects and removes spyware, a relatively new
kind of threat not yet covered by common anti-virus applications. Spyware
silently tracks your surfing behaviour to create a marketing profile for you
that is transmitted without your knowledge to the compilers and sold to
advertising companies. If you see new toolbars in your Internet Explorer
that you haven't intentionally installed, if your browser crashes
inexplicably, or if your home page has been "hijacked" (or changed without
your knowledge), your computer is most probably infected with spyware. Even
if you don't see the symptoms, your computer may be infected, because more
and more spyware is emerging. Spybot-S&D is free, so there's no harm giving
it a try to see if something has invaded your computer.

To see a list of threats Spybot-S&D can remove, in the navigation bar at the
left click on Support --> Threats. For an introduction to Spybot-S&D, please
read the tutorial. If you fear incompatibility with other software you are
now using, although we can assure you that there is no danger you can review
our compatibility overview which lists some software whose compatibility has
been analyzed.

Spybot-S&D can also clean usage tracks, an interesting function if you share
your computer with other users and don't want them to see what you have been
working on. And for professional users, Spybot-S&D allows you to fix some
registry inconsistencies and extended reports. A list of all the
application's features is also available.
<End of quote>

After you installed SB S&D Windows IE will *****integrate***** it into its
Tools Menu. In the right upper corner of IE click Tools and you will see
Spybot Search And destroy configuration item. Click on it and it will give
you options to deal with the threats that are being downloaded.


Listen to Mark Russinovich's (MS) webcast: Advanced Malware Cleaning

<http://www.microsoft.com/emea/spotlight/sessionh.aspx?videoid=359>

Downloading any 3-rd party "free" anti-spyware program (with teh exception
SB S&D) is an invitation for a disaster.

The AV (antivirus industry) is on the way to the cemetery:
The slow death of AV technology:
http://www.theregister.co.uk/2007/06/08/death_of_av/
Vista did it in.
Last note: it has been suggested around here by some unscrupulous trolls
that the Microsoft Malicious Software Removal Tool (MSRT) and SB S&D do not
clean the registry. MSRT and SB S&D work on different principles. MSRT in
full mode reads RAM memory and detects patterns in the files that match
known viruses and other malware configuraions. This is why it takes so long
to run. If malicious code is detected it is also quite likely that it has a
representation in the registry. The only way to remove a particular piece of
malware is to CLEAN the registry off of this key.
SB S&D works by going thru the registry and locating known names that match
its database of malicious software. After all culprits are found the user is
asked if he/she want to remove the malicious software. If you say OK, then
the registry IS CLEANED of this set of malicious execs. The execs themselves
are killed in the respective folders.
In this sense both tools do CLEAN the registry. They do not do any
"housekeeping" which is absolutely superfluous and unnecessary. It is NOT
recommended by MS and most of the experienced users as well.

*******************************
Additional security measure
To prevent unauthorized breaks into your computer, go to Computer
management, and disable Disable "Internet Guest Account." Make sure "Guest"
account is disabled. It should be disabled by default.
 
A

alexB

OK, Malke, you are competing with Synaptic idiot in trying to sell your
cra*ppy idiotic cure-all software at the expense of the OPs best interests.

Are you really an MVP or you are an imposter? How can you say that MS
recommendations for fighting malware are drivel? Where is the limit of your
shame? Do you have any at all?

Your unproven Elephant Computer idiocy is cr*ap. It is just one of multiple
vendors out there who throw their weight around claiming miraculous results.
Where is the proof?

What is Elephant Boy Computers? Who ever heard of you.

I will file a complaint with Microsoft about your unprofessional activities.
I've had enough.

It is one thing to have the links to your cra*ppy stuff in your signature
and is a totally different thing to recommend it openly. You are abusing
your position and the title MS allegedly gave you. You will not get away
with it.
 
A

alexB

Adoration of the Acronis True Image.

Sales have been sagging at ***** Computer. The sales department has decided
to launch a new grass root campaign. Mrs. X started this thread:

Post 1:

Mitsy, You should remember, I told you at the last writers conference that I
am writing a bestseller. After we installed Vista I really had hard time
saving it on the hard disk. Every night when I save my file the hard disk
becomes soft and next morning my bestseller is not a bestseller. I want to
save my bestseller in a True Image, you know that and this terrible
operating system did not want to do it.

In total desperation I googled for "true image" and you know what? I found
this incredible company that sells cccAcronis True Image. I grabbed my
credit card right away and downloaded it. It does save my bestseller in True
Image. No Vista in the world can do it.

Post 2:

Betsy, your stuttering is getting totally unacceptable. I could not
understand what you'd downloaded. I told you at the last conference that I
am also writing a bestseller. I had such terrible time with Vista that I
decided to download guess what? Acronis True Image because without it I
could not even look at myself in the mirror. Even my mirrors did not show me
in my true image.

You know what, Betsy? Now I can save my bestseller on a hard disk and in the
morning I find it finished. Could you believe it? Acronis True Image has
this wonderful property. It can finish your writing while you sleep. Is it
not wonderful Not to mention that fact that I can see myself in the mirror
10 years younger, in real, true image.

Post 3:

Mitsy, I told you that I also downloaded Acronis True Image. I don't know
why you are saying my stuttering is so bad. Acronis actually improved it
too. You know what I discovered? For an additional hundred dollars I could
turn a switch in Acronis and it not only finished my bestseller but wrote
total five new bestsellers. My hard disk was filled with bestsellers. I am
going to be rich.

Post 4

Betsy, The things are really looking up. I am writing NoStop. And you know
what, men got a wind of it too. Oh boy, I think it has this elephant quality
in it. My old man downloaded it yesterday and you could not believe it. Last
night it was much better than with Viagra.
 
N

NoStop

alexB said:
OK, now I know your true nature, Synaptic scoundrel. You are a malware
vendor.
You have proven beyond a shadow of a doubt, that you are definitely INSANE.
Please check into the Institute, where your butt-buddy Francis is holding a
room for you. It's right next to his, so you two should feel right at home.

Cheers.


--
What does Bill Gates use?
http://tinyurl.com/2zxhdl

Proprietary Software: a 20th Century software business model.

Q: What OS is built for lusers?
A: Which one requires running lusermgr.msc to create them?

Frank, hard at work on his Vista computer all day:
http://redwing.hutman.net/~mreed/warriorshtm/compost.htm
 
M

MICHAEL

alexB said:
OK, Malke, you are competing with Synaptic idiot in trying to sell your
cra*ppy idiotic cure-all software at the expense of the OPs best interests.

Are you really an MVP or you are an imposter? How can you say that MS
recommendations for fighting malware are drivel? Where is the limit of your
shame? Do you have any at all?

Your unproven Elephant Computer idiocy is cr*ap. It is just one of multiple
vendors out there who throw their weight around claiming miraculous results.
Where is the proof?

What is Elephant Boy Computers? Who ever heard of you.

I will file a complaint with Microsoft about your unprofessional activities.
I've had enough.

It is one thing to have the links to your cra*ppy stuff in your signature
and is a totally different thing to recommend it openly. You are abusing
your position and the title MS allegedly gave you. You will not get away
with it.

You are still so ever the biggest idiot I have come across
in this forum. If ever anyone needed banning from this
group, you and your butt-bubble bilgewater should be banned.

All anyone from Microsoft would have to do is come here
and read just a few of your preposterous posts to quickly
realize just how enormously ignorant you truly are.



-Michael
 
M

MICHAEL

alexB said:
OK, now I know your true nature, Synaptic scoundrel. You are a malware
vendor.

Just more defecating defamation from *the* forum fool.



-Michael
 
S

SG

Your reply is drivel and ALL your advice is as well. Keep up your crap AlexB
and you will soon find yourself removed from these servers. Malke has been
around these groups for a long time, she is very professional, knowledgeable
and gives excellent advice. She will not be taken down by the likes of you.
She or no one else has to PROVE anything to you. Only the newcomers in these
groups know nothing of how you really are, but it will not take them long to
find out. Your mouth is full of filth, your mind hatred and you really
should seek help.

BTW, from now on if we want anymore crap out of you, you will be ask to
unscrew your head and dip it out.

--
All the best,
SG

ALEX NICHOL
(1935-2005)
http://www.aumha.org/alex.htm
You will never be forgotten my friend
 
S

Synapse Syndrome

alexB said:
OK, now I know your true nature, Synaptic scoundrel. You are a malware
vendor.

I don't need to say anything for everybody in this newsgroup to see how
ridiculous you are.

ss.
 
A

alexB

Microsoft's Antivirus and Ant malware software are BEST for Vista. SpyBot
S&D, a nonprofit corporation existing on volunteer help an donations has
been recognized by MICROSOFT.

You, S.G., Malke, or ANYONE else WILL NOT be able to sell your questionable
software at the expense of the users of this group's best interest.
 
R

RA

alexB said:
OK, Malke, you are competing with Synaptic idiot in trying to sell
your cra*ppy idiotic cure-all software at the expense of the OPs best
interests.

What are they selling? Nothing. No software, no hardware, no advice.
NOTHING.

Are you really an MVP or you are an imposter? How can you say that MS
recommendations for fighting malware are drivel? Where is the limit
of your shame? Do you have any at all?

She says YOUR recommendations are drivel... DRIVEL. Don't try to hide
behind Microsoft with your stupid advice.
Do you even know anything about MVPs? It is quite easy to check
authenticity, but you don't know how do you?

Do you know that we all know how to go back and look at your previous posts
and wonder why you have no shame and embarrassment for all you have posted?

Your unproven Elephant Computer idiocy is cr*ap. It is just one of
multiple vendors out there who throw their weight around claiming
miraculous results. Where is the proof?


You have never even looked at Malke's site have you? What makes you
qualified to say anything about it at all? Those of us who have used the
information on her site know it to be excellent. She has an excellent
reputation and her skills and knowledge are the best.

What is Elephant Boy Computers? Who ever heard of you.

Obviously you have or you wouldn't be talking about it.

I will file a complaint with Microsoft about your unprofessional
activities. I've had enough.

You keep threatening to do that but nothing happens, does it?

It is one thing to have the links to your cra*ppy stuff in your
signature and is a totally different thing to recommend it openly.

What the hell are you talking about?

You are abusing your position and the title MS allegedly gave you.

The only abuse in this place comes from you.


You will not get away with it.

What are you going to do, make more threats?



I think it is hilarious that you are so threatened by Malke and her advice.
She hardly ever posts in response to your idiocy and she seldom defends
herself. She doesn't need to because her reputation says it all. Your
reputation also says it all about you, your skills and your mental illness.
 
S

SG

SpyBot S&D is a good program indeed, but how in this world or whatever world
you live in gave you the notion I was selling any software?. Again when you
attack someone in these groups for NO reason at all I will be on your butt
like it or not. It's takes just as much time and effort to be polite and
helpful Alex as it does to be rude such as you have been many times over in
these groups. I been around many years in these groups, but I am yet to ever
remember someone such as you with your filthy mouth and attitude.

I use to never get involved in these silly discussions, even advised others
to do the same, but you are the worse I've ever seen and WILL NOT stand by
and let you degrade innocent people.

--
All the best,
SG

ALEX NICHOL
(1935-2005)
http://www.aumha.org/alex.htm
You will never be forgotten my friend
 
T

The Colonel

I've done everything that is listed here but I still get the pop-up
everytime. Nothing happened. I cleaned everything that wa sin my computer
that was any kind of virus or spyware.
 
S

SG

You say you done everything that is listed here, so without guessing what it
is you have tried please post exactly what it is you have done. If you only
done what AlexB suggested then you my friend are indeed in trouble. Spybot
S&D is a good program, but the rest he suggested is just minimal and you say
it's still happening, that should tell you something. It takes more than one
Spyware program to rid your system of the mess it's in and sometimes no
matter how good they are and how many you use you still cannot rid your
system of these parasites. Not to scare you, but some cases a reformat and
reinstall is the only option you may have left. Again post what you tried
and we will take it from there to see how bad this really may be.

--
All the best,
SG

ALEX NICHOL
(1935-2005)
http://www.aumha.org/alex.htm
You will never be forgotten my friend
 
T

The Colonel

I got the Windows Malicious Software Removal Tool scanned it and it found
nothing at all. I did the Protection Scanner and it found something on my
computer but all it found was cookies. So I got the Spybot Search & Destroy
and I found something called Virtumonde which I had removed completely off of
my computer and now it is still doing the pop-up everytime I open IE.
 
C

captain notaclue

on start up a box appears with the title RUNDLL and then goes on to suggest "
Error Loading C:\Windows\System32\gzmrt.dll" Is this a problem and how can
i solve it?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top