Windows cannot load C:\windows\system32\smucsjro.dll

[Guest]

I'm helping to clean a computer and I'm getting the following error message
when booting up: Windows cannot load C:\windows\system32\smucsjro.dll.

At this point in the game, I’m not buying it’s a valid windows error. I
suspect it’s something to do with a Trojan or other spy/malware. I can’t
find this file on my box and I can't seem to find anything concerning this
dll on any tekkie website.

The computer also has Trojan that’s a pain to get removed (Trojan.Vundo).

I would appreciate any advice.

Thanks.

 

[Guest]

The complete error message is as follows:

"Error loading C:\windows\system32\smucsjro.dll. The specified module could
not be found."

And now I'm getting another similar error message:

"Error loading C:\windows\system32\mjlvwgka.dll. The specified module could
not be found."

Thanks.

 

[Elmo]

The complete error message is as follows:

"Error loading C:\windows\system32\smucsjro.dll. The specified module could
not be found."

And now I'm getting another similar error message:

"Error loading C:\windows\system32\mjlvwgka.dll. The specified module could
not be found."

Thanks.

A Google Groups search showed no mention of either file, other than your
post. That suggests that some malware was removed, but the reference to
the file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

 

[Guest]

The complete error message is as follows:

"Error loading C:\windows\system32\smucsjro.dll. The specified module could
not be found."

And now I'm getting another similar error message:

"Error loading C:\windows\system32\mjlvwgka.dll. The specified module could
not be found."

Thanks.

The way the name change on every boot indicate it is a kind of malware or
Viral infection or remnants from the removal of the Vundo still read by the
operating system on boot.
You need to scan from other vendors to get a clear opinion on how clean your
system is, also you can send your Hijack log to one of many forums on the net
for analysis.
Scan for malware from here:
Spybot Search & Destroy
http://www.safer-networking.org/en/download/index.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/

2- Download the Hijackthis and send the report to one of many
forums for analysis and troubleshooting:
http://www.merijn.org/index.php
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.
Any error message, have a look in the event viewer and post them here.
HTH.
nass