kheddb.dll & qomnkl.dll

View previous topic View next topic Go down

Solved kheddb.dll & qomnkl.dll

Post by ACESWILD on Tue Sep 14, 2010 10:16 pm

Have these pop up when system boots up. Tried to find what they belong to doing a search, but find nothing at all on them.

Error Loading khebbd.dll window pops up 3 times durning boot up

Error Loading qomnkl.dll window pops up 3 times durning boot up.

OS = XP Pro SP2

Security = Microsoft Security Essentials

had some issues with a piece of malware, got rid of is, bit now these pop up.

Does not seem to be affecting system operations, all programs I use seem to be operating correctly. Just would like to have them removed and find out what they belong to.

Thanks in advance for any assistance you might be able to give.

ACESWILD
Beginner
Beginner

Posts Posts : 2
Joined Joined : 2010-07-01
OS OS : xp pro
Points Points : 23518
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: kheddb.dll & qomnkl.dll

Post by Belahzur on Tue Sep 14, 2010 11:37 pm

Hello.

Download [You must be registered and logged in to see this link.] by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245069
# Likes # Likes : 1

View user profile

Back to top Go down

Solved yee-haw - issue resolved

Post by ACESWILD on Wed Sep 15, 2010 8:05 am

Thanks. I fixed the issue and here is what I did. Hooray!

A couple side notes first.
I use Hi-Jack This once a month just to do a scan of the system. Once this issue came up, Hi-Jack This did not show the files attempting to load, or load. the boxes would just pop up like I stated in teh first post.

I ran OTL and viewed the logs. I could not find where either DLL was being loaded or attempting to be loaded. So for giggles I ran Hi-Jack This while the OTL was still in the OPEN State. WOW, now the files were there, 3 times each. I could not copy and paste so am typing the way they appeared the long way.

04 - HKLM\..\Run:[mlkjjjaudio] rundll32.exe "kheddb.dll:'s
04 - HKLM\..\Run:[TUVWXUAUDIO] rundll32.exe "kheddb.dll:'s
04 - HKLM\..\Run:[awturssys] rundll32.exe "qomnkl.dll:'s
04 - HKLM\..\Run:[ssqnkjsys] rundll32.exe "qomnkl.dll:'s (USER SYSTEM)
04 - HKLM\..\Run:[dddawwaudio] rundll32.exe "kheddb.dll:'s (USER SYSTEM)
04 - HKLM\..\Run:[EFFGECAUDIO] rundll32.exe "KHEDDB.dll:'s (USER SYSTEM)


Because I have not installed any type of new Audio in my system, I assumed that something tried to overtake my system, possible when in the "auto update mode". I shut the Auto Updates to manual and will do myself from now on.

Check with the Code Section on Hi-Jack This to verify what the 04 code was ( Enumeration of suspicious autoloading Registry entries ). I knew this 04 code from before, but just wanted to verify.

Checking and fixing the issue (actually deleting the entry but backing it up just in case) seemed to solve the issue of the boxes popping up.

I rebooted. Checked all the programs I use on a daily basis and then some, found no problems in running them. I figured that if there becomes a problem down the road, I will just re-install that program.

What I found to be really weird was that Hi-Jack This did not show these files before. But after running OTL and leaving it open, they showed up.

Thanks for your help. I am keeping the OTL program and will use again if needed in the future.


Thank You! Thank You! Thank You!






ACESWILD
Beginner
Beginner

Posts Posts : 2
Joined Joined : 2010-07-01
OS OS : xp pro
Points Points : 23518
# Likes # Likes : 0

View user profile

Back to top Go down

Solved Re: kheddb.dll & qomnkl.dll

Post by Belahzur on Thu Sep 16, 2010 12:14 am

Hello.
That may only be a temporary fix because this looks like a vundo infection, an adware infection that can make many copies of itself.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245069
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum