DLL Files

[Barry]

I have two DLL file that come up everytime I start my computer that say they
are "error loading". I dont know what they are but my computer can still run
with them not starting but I want to know if they are viruses or something
that I need for my computer.
These are the two files:
C:\WINDOWS\system32\zutokewa.dll
C:\WINDOWS\system32\keveyate.dll

I am running the XP Home Eddition. If you need anymore info on what I am
running on my computer please let me know. But those files are something I
would like to know what te are. Please help me with what I need to do get get
them back or delete them from my computer.
I do not have the XP disc to reload on my computer so whatever you can do to
help me would be very helpful.

 

[JS]

zutokewa.dll
http://www.google.com/search?hl=en&q=zutokewa.dll&btnG=Google+Search&aq=f&oq=

keveyate.dll
http://www.google.com/search?hl=en&q=keveyate.dll&btnG=Search

 

[Gerry]

Barry

As you will see from the links posted by JS there are suggestions that
these are possibly the remains of a malware infestation. What are you
anti-virus and anti-spyware arreangements? Have you looked at the
history logs to see what was removed shortly before these errors first
started appearing?

It would be sensible to remove older system restore points in the event
that some part of the malware remains there. Select Start, All Programs,
accessories, System Tools, Disk CleanUp, More Options, System Restore
and remove all but the latest System Restore point. Run Disk
Defragmenter.

The errors themselves are being generated because the start up items
created by the malware have probably been removed by your security
software. You can locate the entries using Autoruns. I suggest you
disable the entries. That will stop you seeing the errors. If you get no
ill effects after several days use Autoruns to remove the entries.

To identify what loads when you boot use Autoruns (freeware from
Microsoft).
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

With Autoruns you can uncheck an item, which disables it from
starting,or you can right click an item and then delete it. If you
uncheck youcan recheck to re-enable the item. It is a much safer
approach than editing the Registry and better than using msconfig..
Another useful feature of the programme is that you can right click an
item and select Search Online to get information about the item
selected.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Elmo]

I have two DLL file that come up every time I start my computer that say
"error loading". I don't know what they are but my computer can still run
with them not starting but I want to know if they are viruses or something
that I need for my computer.
These are the two files:
C:\WINDOWS\system32\zutokewa.dll
C:\WINDOWS\system32\keveyate.dll

I am running the XP Home Edition. If you need anymore info on what I am
running on my computer please let me know. But those files are something I
would like to know what they are. Please help me with what I need to do to get
them back or delete them from my computer.
I do not have the XP disc to reload on my computer so whatever you can do to
help me would be very helpful.

It's possible some malware was deleted by your a/v software, but the
reference to the file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.