what is rmkbpaba.dll

[m.a]

Hello,

My windows XP professional, had an adware and I removed it. But now I am
getting an error at boot up that rmkbpaba.dll can not be found by
rundll.exe.



What is this file and how can I remove this error?



Regards

 

[Malke]

Hello,

My windows XP professional, had an adware and I removed it. But now I
am
getting an error at boot up that rmkbpaba.dll can not be found by
rundll.exe.

What is this file and how can I remove this error?

A quick Google for rmkbpaba.dll only brings up links to your post so this is
a strong indication the file was part of malware. Since you didn't say how
or with what you removed the malware, I can't tell whether your computer is
truly clean. Please review the removal methods at this link to see if you
were that thorough:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

If you were not, then you should run through at least some of the steps, not
skipping the prep work. If you were that thorough, manage your Startup
matrix with the System Configuration Utility and/or the free Autoruns.

http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

System Configuration Utility - Start>Run>msconfig [enter]

This brings up the System Configuration Utility. Look on the Startup tab and
find the probable culprit. Uncheck the box next to its name, Apply and OK
out. You don't need to restart immediately, but the next time you do you'll
get a dialog saying you've used the Utility. Just tick the box that says in
effect, "don't bother me about this again".

Important - Do not use the System Configuration Utility to stop processes.
Instead, use Start>Run>services.msc [enter] and do not stop any services
unless you really, really know what you're doing.

Malke

 

[m.a]

Hello,

My windows XP professional, had an adware and I removed it. But now I
am
getting an error at boot up that rmkbpaba.dll can not be found by
rundll.exe.

What is this file and how can I remove this error?

A quick Google for rmkbpaba.dll only brings up links to your post so this
is
a strong indication the file was part of malware. Since you didn't say how
or with what you removed the malware, I can't tell whether your computer
is
truly clean. Please review the removal methods at this link to see if you
were that thorough:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

If you were not, then you should run through at least some of the steps,
not
skipping the prep work. If you were that thorough, manage your Startup
matrix with the System Configuration Utility and/or the free Autoruns.

http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

System Configuration Utility - Start>Run>msconfig [enter]

This brings up the System Configuration Utility. Look on the Startup tab
and
find the probable culprit. Uncheck the box next to its name, Apply and OK
out. You don't need to restart immediately, but the next time you do
you'll
get a dialog saying you've used the Utility. Just tick the box that says
in
effect, "don't bother me about this again".

Important - Do not use the System Configuration Utility to stop processes.
Instead, use Start>Run>services.msc [enter] and do not stop any services
unless you really, really know what you're doing.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

Thanks,

I found the following dlls in my system and I removed them:

rmkbpaba.dll

hggffgd.dll

jcsysgen.dll

jkklm.dll



before removing them, I had popup in my IE even when it was not running. Now
I have not that side effects.



After removing these files, I did a windows XP repair install.



I am going to try to do your advice and find if there is any other malware
on my system.



Regards



ps: I removed theser files manually as no malware detection found them.

 

[windmap]

Boot to safe mode and run the adware removal scanner again.

 

[m.a]

Hello,

My windows XP professional, had an adware and I removed it. But now I
am
getting an error at boot up that rmkbpaba.dll can not be found by
rundll.exe.

What is this file and how can I remove this error?

A quick Google for rmkbpaba.dll only brings up links to your post so this
is
a strong indication the file was part of malware. Since you didn't say
how
or with what you removed the malware, I can't tell whether your computer
is
truly clean. Please review the removal methods at this link to see if you
were that thorough:

http://www.elephantboycomputers.com/page2.html#Removing_Malware

If you were not, then you should run through at least some of the steps,
not
skipping the prep work. If you were that thorough, manage your Startup
matrix with the System Configuration Utility and/or the free Autoruns.

http://www.microsoft.com/technet/sysinternals/default.mspx - Autoruns

System Configuration Utility - Start>Run>msconfig [enter]

This brings up the System Configuration Utility. Look on the Startup tab
and
find the probable culprit. Uncheck the box next to its name, Apply and OK
out. You don't need to restart immediately, but the next time you do
you'll
get a dialog saying you've used the Utility. Just tick the box that says
in
effect, "don't bother me about this again".

Important - Do not use the System Configuration Utility to stop
processes.
Instead, use Start>Run>services.msc [enter] and do not stop any services
unless you really, really know what you're doing.

Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!

Thanks,

I found the following dlls in my system and I removed them:

rmkbpaba.dll

hggffgd.dll

jcsysgen.dll

jkklm.dll



before removing them, I had popup in my IE even when it was not running.
Now I have not that side effects.



After removing these files, I did a windows XP repair install.



I am going to try to do your advice and find if there is any other malware
on my system.



Regards



ps: I removed theser files manually as no malware detection found them.

Hello,
I found that it relates to an entry in my windows
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
with the name of 20f3f088 with its value set to:
rundll32.exe "C:\WINDOWS\system32\rmkbpaba.dll",b


Regards

 

[m.a]

Thanks.
Which free malware removal software do you recomend?

I have windows defender. Is it any good?

Regards

 

[windmap]

Try Spyware Doctor www.pctools.com/spyware-doctor/

 

[Malke]

Thanks,

I found the following dlls in my system and I removed them:

rmkbpaba.dll

hggffgd.dll

jcsysgen.dll

jkklm.dll

before removing them, I had popup in my IE even when it was not running.
Now I have not that side effects.

After removing these files, I did a windows XP repair install.

ps: I removed theser files manually as no malware detection found them.

You have a Vundo infection. If no malware detection removed it, then you
didn't follow the malware removal steps I recommended to you. It is
extremely doubtful that the Repair Install or simply deleting the files
manually removed Vundo since most variants respawn.

At this point you should do what I suggested and register at one of the
specialty forums listed below. You'll run HijackThis and post your log
there - *not* here, please.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 - another
tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/

Malke