efivxkrs.dll

[psyrix]

When i restart my computer i get an RUNDLL error

"Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
"The Specified module could not be found."

I searched all that i can and get no information on this .dll
it appears anybody hasnt heard of this .dll or just never had a problem with
it.

[pa bear [ms mvp]]

You are seeing the effects of a hijackware infection!

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/pag ... ng_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachines ... board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

Psyrix wrote:
> When i restart my computer i get an RUNDLL error
>
> "Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
> "The Specified module could not be found."
>
> I searched all that i can and get no information on this .dll
> it appears anybody hasnt heard of this .dll or just never had a problem
> with
> it.

[elmo]

Psyrix wrote:
> When i restart my computer i get an RUNDLL error
>
> "Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
> "The Specified module could not be found."
>
> I searched all that i can and get no information on this .dll
> it appears anybody hasn't heard of this .dll or just never had a problem with
> it.

A virus or other malware created the file. It's an old trick to use a
random filename so nothing can be found on the file. If the file was
named virus.exe, that'd be too easy, huh?

Malware was deleted by your a/v software, but the reference to the file
was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.

--
Joe =o)

[psyrix]

"Elmo" wrote:

> Psyrix wrote:
> > When i restart my computer i get an RUNDLL error
> >
> > "Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
> > "The Specified module could not be found."
> >
> > I searched all that i can and get no information on this .dll
> > it appears anybody hasn't heard of this .dll or just never had a problem with
> > it.
>
> A virus or other malware created the file. It's an old trick to use a
> random filename so nothing can be found on the file. If the file was
> named virus.exe, that'd be too easy, huh?
>
> Malware was deleted by your a/v software, but the reference to the file
> was not removed from the registry.
>
> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
> type the name of the file into the search pane. Click "Find Next", and
> when located, delete the reference to the file. Press F3 to continue
> the search.
>
> You can click File, Export, and save the entry to the Desktop. If you
> remove it and there's a problem, double-click the .reg file you exported
> to the Desktop and it'll be added to the registry again. You can create
> a restore point before editing the registry too.
>
> You could click Start, Run, type MSCONFIG, click OK, click the StartUp
> tab, and deselect the item(s). When you restart the computer, you will
> be warned that you're running in the Diagnostic mode; click to not alert
> you again, and OK out. You won't see the message again. But I think
> it's best to just remove the references from the registry.
>
> --
> Joe =o)
>

It worked like a charm thank you very much

[elmo]

Psyrix wrote:
>
> "Elmo" wrote:
>
>> Psyrix wrote:
>>> When I restart my computer I get an RUNDLL error
>>>
>>> "Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
>>> "The Specified module could not be found."
>>>
>>> I searched all that I can and get no information on this .dll
>>> it appears anybody hasn't heard of this .dll or just never had a problem with
>>> it.
>> Malware was deleted by your a/v software, but the reference to the file
>> was not removed from the registry.
>>
>> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
>> type the name of the file into the search pane. Click "Find Next", and
>> when located, delete the reference to the file. Press F3 to continue
>> the search.
>>
>>
>
> It worked like a charm thank you very much

That's great! Thanks for reporting back.

--
Joe =o)

[pa bear [ms mvp]]

It'll be replace when you reboot!

Psyrix wrote:
> "Elmo" wrote:
>
>> Psyrix wrote:
>>> When i restart my computer i get an RUNDLL error
>>>
>>> "Eorror loading C:\WINDOWS\system32\efivxkrs.dll"
>>> "The Specified module could not be found."
>>>
>>> I searched all that i can and get no information on this .dll
>>> it appears anybody hasn't heard of this .dll or just never had a problem
>>> with it.
>>
>> A virus or other malware created the file. It's an old trick to use a
>> random filename so nothing can be found on the file. If the file was
>> named virus.exe, that'd be too easy, huh?
>>
>> Malware was deleted by your a/v software, but the reference to the file
>> was not removed from the registry.
>>
>> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
>> type the name of the file into the search pane. Click "Find Next", and
>> when located, delete the reference to the file. Press F3 to continue
>> the search.
>>
>> You can click File, Export, and save the entry to the Desktop. If you
>> remove it and there's a problem, double-click the .reg file you exported
>> to the Desktop and it'll be added to the registry again. You can create
>> a restore point before editing the registry too.
>>
>> You could click Start, Run, type MSCONFIG, click OK, click the StartUp
>> tab, and deselect the item(s). When you restart the computer, you will
>> be warned that you're running in the Diagnostic mode; click to not alert
>> you again, and OK out. You won't see the message again. But I think
>> it's best to just remove the references from the registry.
>>
>> --
>> Joe =o)
>>
>
> It worked like a charm thank you very much