virus and file replacement issue

I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

Click Start Run, type in: regedit and press Enter
Navigate to the key:
hkey_local_machine\software\microsoft\windows\curr ent version\run

Look for a value in the right pane:
RUNDLL32.EXE %Windir%\[random value].dll,_mainRD

If found delete it.


--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message =
...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used =
bitdefender=20
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file =
windows\rauhccup.dll not=20
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

Never heard of that file, nor does Google search return anything. Conclusion:
That file was nothing *but* virus and has no other purpose whatsoever. The
reason you're getting an error is because a startup command still remains that
tries to launch it. Solution: Remove the command from wherever it's located.

Procedu
StartRunMSINFO32
Expand (click on + sign) "Software Environment", then click on "Startup
Programs"
Look for a command on the right side that includes the filename. Now look for
the notation that tells where that command is located. Examples: "Startup Group"
means that the command is in the form of a shortcut in your
Start\Programs\Startup folder. "Machine Run" or "Per User Run" indicate Registry
entries. Once you find out where the command is located, then post back here for
instruction on how to remove it.

--
Gary S. Terhune
MS MVP Shell/User

"AM" wrote in message
...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

Gary:

Thank you for your message. I did what you suggest but came up with no
information on the screen when I clicked on Startup Programs. In other
words, when I followed the steps you suggested, once I clicked on Startup
Programs, the message was something like there is nothing in this view.
This may be because I had cleaned up the startup programs earlier per info
from Dell.

However, please also see my reply to Brian A. which describes this, my
continuing problems, and also the fact that when I did what he suggests, I
could not find anything saying "run" in the Hkey_local_machine etc. sequence
he gave me.

Thanks again.

A
M

"Gary S. Terhune" wrote:

Never heard of that file, nor does Google search return anything. Conclusion:
That file was nothing *but* virus and has no other purpose whatsoever. The
reason you're getting an error is because a startup command still remains that
tries to launch it. Solution: Remove the command from wherever it's located.

Procedu
StartRunMSINFO32
Expand (click on + sign) "Software Environment", then click on "Startup
Programs"
Look for a command on the right side that includes the filename. Now look for
the notation that tells where that command is located. Examples: "Startup Group"
means that the command is in the form of a shortcut in your
Start\Programs\Startup folder. "Machine Run" or "Per User Run" indicate Registry
entries. Once you find out where the command is located, then post back here for
instruction on how to remove it.

--
Gary S. Terhune
MS MVP Shell/User

"AM" wrote in message
...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

Brian:

Thank you for your help. Please also see my reply to Gary Terhune's message
above.

When I did what you suggest, I got all the way to
Hkey_local_machine\software\microsoft\windows\curr ent version and that was
it. There was no "run" beyond that.

I contacted Dell and they've given me lots of suggestions -- none seemed to
work. One was to clean up start up files which I have done based on the
following from Dell:

* Run through the following steps. If you do not see a step on your
screen, just skip it and continue.

(I) RESET & CLEAR START UP PROGRAMS
Clearing the Startup Environment
Click the Start button.
Click Run.
Type msconfig in the open field.
Click the Ok button.
The System Configuration Utility appears.
Click the Startup tab.
A list of Startup Items for your computer appears.
Click to de-select items from your startup group.
Click the Ok button.
Click the Restart button.
Your computer reboots.

--------
Dell also suggested that I download and run a utility called Stinger -- this
is some kind of scanning utility from McAfee. I did so and it reported all
clean.

The problems is that I am still getting messages from people advising that
they are getting emails from me with obscene comments and obscene headings
and sometimes with zip files that cannot be opened.

The file I mentioned \windows\rauhccup1.dll is still in quarantine under the
bitdefender program. I cannot seem to send it to them for analysis -- I keep
getting error messages when I enter my email server and email address.

When I selected the quarantine folder to be scanned by the various scanners
I have used so far -- about 3 of them -- the Stinger mentioned above,
pandasoftware, bitdefender, and one other -- no virus is reported.

By the way, previous scans of the entire computer found viruses but those
have supposedly been cleaned up -- hence the file in the quarantine folder,
for example.

I'd appreciate any other ideas you and Gary may have.

Thanks again.

AM


"Brian A." wrote:

Click Start Run, type in: regedit and press Enter
Navigate to the key:
hkey_local_machine\software\microsoft\windows\curr ent version\run

Look for a value in the right pane:
RUNDLL32.EXE %Windir%\[random value].dll,_mainRD

If found delete it.


--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message ...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

The email responses from others about inappropriate content does not =
mean you are still infected. Any virus you may have had that can =
collect/use the contacts in your address book could be the cause. Once =
it has the info needed it will continue to use that info to make it =
appear to have come from you. It also may be that someone else that has =
you in their address book has a virus and it is using your addy to =
propagate. Viruses that use collected addy's are harder to track back to =
the originator. It may very well be that you're system is clean.

Dell should not have had you use msconfig as a startup cleaning utility, =
you should only use msconfig for troubleshooting problems, although it =
could be used for stubborn programs until you find a way to disable them =
otherwise.=20
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is =
probably a way in the programs options that will disable it.

Right click on the programs icon in the systray to see if there is an =
option to disable it from loading on boot.

Open the program/s in question and check their options to see if they =
have one to disable it from loading on boot.

Remove any entries from the Startup folder that you do not want to load =
on boot.
Start Programs Startup

Uninstall the program you don't want loading if out of other options.

Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load=3D =
or run=3D, these lines are usually blank after the =3D. Remove anything =
after the =3D on those lines if you do not want it running.

Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following =
keys:=20
hkey_current_user\software\microsoft\windows\curre nt version\run=20
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce=20
hkey_local_machine\software\microsoft\windows\curr ent version\run=20
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce=20
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnceEx=20
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunServices=20
hkey_local_machine\software\microsoft\windows\curr ent =
version\RunServicesOnce=20

Remove or REM the entries from within these keys in the right pane. =
Always backup the registry before making any changes so that you may =
import the keys back in should anything go wrong. Haphazardly removing =
keys in the registry is very dangerous and can render your system =
useless. Be 100% sure of what you are doing and what you remove can be =
safely done.

You can Backup the registry key/s while in regedit: Click on Registry =
on the menu bar while in the registry, click on =E2=80=9CExport Registry =
File.=E2=80=9D. Choose a location, I recommend saving it to the desktop =
and it makes it easy to find. Place a check next to =E2=80=9CSelected =
Branch=E2=80=9D and give the file a memorable name, select save, make =
your changes and close out. If you have no problems after say 2 weeks, =
you can delete the exported files.
If you have problems, double click the reg file on the desktop to =
import/merge it back into the registry.

Do Not back up the entire registry in the registry editor. Importing it =
back while in windows can be harmful to the machine. A registry backup =
is created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine =
has been booted, got to Start Run, type in: scanregw and hit enter. =
You will be prompted that a registry has already been backed up for the =
day and do you wish to create a new one, click yes.

More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium Edition
http://support.microsoft.com/default...b;en-us;256419

HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows =
98, and Windows Me
http://support.microsoft.com/default...b;en-us;322754

How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512

--=20

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message =
...
Brian:
=20
Thank you for your help. Please also see my reply to Gary Terhune's =
message=20
above.
=20
When I did what you suggest, I got all the way to=20
Hkey_local_machine\software\microsoft\windows\curr ent version and that =
was=20
it. There was no "run" beyond that.
=20
I contacted Dell and they've given me lots of suggestions -- none =
seemed to=20
work. One was to clean up start up files which I have done based on =
the=20
following from Dell:
=20
* Run through the following steps. If you do not see a step on your=20
screen, just skip it and continue.
=20
(I) RESET & CLEAR START UP PROGRAMS
Clearing the Startup Environment
Click the Start button.=20
Click Run.=20
Type msconfig in the open field.=20
Click the Ok button.
The System Configuration Utility appears.=20
Click the Startup tab.
A list of Startup Items for your computer appears.=20
Click to de-select items from your startup group.
Click the Ok button.=20
Click the Restart button.
Your computer reboots.
=20
--------
Dell also suggested that I download and run a utility called Stinger =
-- this=20
is some kind of scanning utility from McAfee. I did so and it =
reported all=20
clean.
=20
The problems is that I am still getting messages from people advising =
that=20
they are getting emails from me with obscene comments and obscene =
headings=20
and sometimes with zip files that cannot be opened.
=20
The file I mentioned \windows\rauhccup1.dll is still in quarantine =
under the=20
bitdefender program. I cannot seem to send it to them for analysis -- =
I keep=20
getting error messages when I enter my email server and email address.
=20
When I selected the quarantine folder to be scanned by the various =
scanners=20
I have used so far -- about 3 of them -- the Stinger mentioned above,=20
pandasoftware, bitdefender, and one other -- no virus is reported.
=20
By the way, previous scans of the entire computer found viruses but =
those=20
have supposedly been cleaned up -- hence the file in the quarantine =
folder,=20
for example.
=20
I'd appreciate any other ideas you and Gary may have.
=20
Thanks again.
=20
AM
=20
=20
"Brian A." wrote:
=20
Click Start Run, type in: regedit and press Enter
Navigate to the key:
hkey_local_machine\software\microsoft\windows\curr ent version\run
=20
Look for a value in the right pane:
RUNDLL32.EXE %Windir%\[random value].dll,_mainRD
=20
If found delete it.
=20
=20
--=20
=20
Brian A.
=20
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm
=20
=20
"AM" wrote in message =
...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used =
bitdefender=20
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file =
windows\rauhccup.dll not=20
found.
What is the purpose of this file and how do I get a clean copy of =
it?
Thanks.

Brian:

Thank you for this detailed response.

I am satisfied that my system is clean since I've now scanned it several
times with different products, the latest being McAfee's online scanner. I
disabled Bitdefender when I did these scans.

Right now, only a couple of programs boot on start -- obviously, because I
loaded them after doing what Dell had originally suggested. I will go back
and select what I want on start when the virus stuff is totally clear.

I am planning on installing Norton AV.

Again, I appreciate your time and courtesy in responding and helping.

Be well....
Cheers...AM

"Brian A." wrote:

The email responses from others about inappropriate content does not mean you are still infected. Any virus you may have had that can collect/use the contacts in your address book could be the cause. Once it has the info needed it will continue to use that info to make it appear to have come from you. It also may be that someone else that has you in their address book has a virus and it is using your addy to propagate. Viruses that use collected addy's are harder to track back to the originator. It may very well be that you're system is clean.

Dell should not have had you use msconfig as a startup cleaning utility, you should only use msconfig for troubleshooting problems, although it could be used for stubborn programs until you find a way to disable them otherwise.
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is probably a way in the programs options that will disable it.

Right click on the programs icon in the systray to see if there is an option to disable it from loading on boot.

Open the program/s in question and check their options to see if they have one to disable it from loading on boot.

Remove any entries from the Startup folder that you do not want to load on boot.
Start Programs Startup

Uninstall the program you don't want loading if out of other options.

Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load= or run=, these lines are usually blank after the =. Remove anything after the = on those lines if you do not want it running.

Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following keys:
hkey_current_user\software\microsoft\windows\curre nt version\run
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\run
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnceEx
hkey_local_machine\software\microsoft\windows\curr ent version\RunServices
hkey_local_machine\software\microsoft\windows\curr ent version\RunServicesOnce

Remove or REM the entries from within these keys in the right pane. Always backup the registry before making any changes so that you may import the keys back in should anything go wrong. Haphazardly removing keys in the registry is very dangerous and can render your system useless. Be 100% sure of what you are doing and what you remove can be safely done.

You can Backup the registry key/s while in regedit: Click on Registry on the menu bar while in the registry, click on “Export Registry File.�. Choose a location, I recommend saving it to the desktop and it makes it easy to find. Place a check next to “Selected Branch� and give the file a memorable name, select save, make your changes and close out. If you have no problems after say 2 weeks, you can delete the exported files.
If you have problems, double click the reg file on the desktop to import/merge it back into the registry.

Do Not back up the entire registry in the registry editor. Importing it back while in windows can be harmful to the machine. A registry backup is created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine has been booted, got to Start Run, type in: scanregw and hit enter. You will be prompted that a registry has already been backed up for the day and do you wish to create a new one, click yes.

More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium Edition
http://support.microsoft.com/default...b;en-us;256419

HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows 98, and Windows Me
http://support.microsoft.com/default...b;en-us;322754

How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message ...
Brian:

Thank you for your help. Please also see my reply to Gary Terhune's message
above.

When I did what you suggest, I got all the way to
Hkey_local_machine\software\microsoft\windows\curr ent version and that was
it. There was no "run" beyond that.

I contacted Dell and they've given me lots of suggestions -- none seemed to
work. One was to clean up start up files which I have done based on the
following from Dell:

* Run through the following steps. If you do not see a step on your
screen, just skip it and continue.

(I) RESET & CLEAR START UP PROGRAMS
Clearing the Startup Environment
Click the Start button.
Click Run.
Type msconfig in the open field.
Click the Ok button.
The System Configuration Utility appears.
Click the Startup tab.
A list of Startup Items for your computer appears.
Click to de-select items from your startup group.
Click the Ok button.
Click the Restart button.
Your computer reboots.

--------
Dell also suggested that I download and run a utility called Stinger -- this
is some kind of scanning utility from McAfee. I did so and it reported all
clean.

The problems is that I am still getting messages from people advising that
they are getting emails from me with obscene comments and obscene headings
and sometimes with zip files that cannot be opened.

The file I mentioned \windows\rauhccup1.dll is still in quarantine under the
bitdefender program. I cannot seem to send it to them for analysis -- I keep
getting error messages when I enter my email server and email address.

When I selected the quarantine folder to be scanned by the various scanners
I have used so far -- about 3 of them -- the Stinger mentioned above,
pandasoftware, bitdefender, and one other -- no virus is reported.

By the way, previous scans of the entire computer found viruses but those
have supposedly been cleaned up -- hence the file in the quarantine folder,
for example.

I'd appreciate any other ideas you and Gary may have.

Thanks again.

AM


"Brian A." wrote:

Click Start Run, type in: regedit and press Enter
Navigate to the key:
hkey_local_machine\software\microsoft\windows\curr ent version\run

Look for a value in the right pane:
RUNDLL32.EXE %Windir%\[random value].dll,_mainRD

If found delete it.


--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message ...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.

Norton AV is a *bad* idea. It has been a bad idea for several years now, and
it's only gotten worse! Search this newsgroup using Google for mention of
Norton. You'll quickly get the picture. It's only somewhat behind actual viruses
and other malware in causing major screwing up of Win98 systems.

Try eTrust Armor.
www.my-etrust.com/microsoft

Brian has responded, and responded well, to your other issues.

--
Gary S. Terhune
MS MVP Shell/User

"AM" wrote in message
...
Brian:

Thank you for this detailed response.

I am satisfied that my system is clean since I've now scanned it several
times with different products, the latest being McAfee's online scanner. I
disabled Bitdefender when I did these scans.

Right now, only a couple of programs boot on start -- obviously, because I
loaded them after doing what Dell had originally suggested. I will go back
and select what I want on start when the virus stuff is totally clear.

I am planning on installing Norton AV.

Again, I appreciate your time and courtesy in responding and helping.

Be well....
Cheers...AM

"Brian A." wrote:

The email responses from others about inappropriate content does not mean
you are still infected. Any virus you may have had that can collect/use the
contacts in your address book could be the cause. Once it has the info needed it
will continue to use that info to make it appear to have come from you. It also
may be that someone else that has you in their address book has a virus and it
is using your addy to propagate. Viruses that use collected addy's are harder to
track back to the originator. It may very well be that you're system is clean.

Dell should not have had you use msconfig as a startup cleaning utility, you
should only use msconfig for troubleshooting problems, although it could be used
for stubborn programs until you find a way to disable them otherwise.
Click Start Run, type in: msconfig and hit enter.
Click on the Startup tab and uncheck the program you wish to disable.
If the program adds a new second entry on reboot, then there is probably a
way in the programs options that will disable it.

Right click on the programs icon in the systray to see if there is an option
to disable it from loading on boot.

Open the program/s in question and check their options to see if they have
one to disable it from loading on boot.

Remove any entries from the Startup folder that you do not want to load on
boot.
Start Programs Startup

Uninstall the program you don't want loading if out of other options.

Look in Start Run, type in: sysedit and hit enter.
Click on the win.ini window and see if there is anything after load= or
run=, these lines are usually blank after the =. Remove anything after the = on
those lines if you do not want it running.

Look in the Registry under these keys:
Start Run, type in: regedit and hit enter. Navigate to the following keys:
hkey_current_user\software\microsoft\windows\curre nt version\run
hkey_current_user\software\microsoft\windows\curre nt version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\run
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnce
hkey_local_machine\software\microsoft\windows\curr ent version\RunOnceEx
hkey_local_machine\software\microsoft\windows\curr ent version\RunServices
hkey_local_machine\software\microsoft\windows\curr ent
version\RunServicesOnce

Remove or REM the entries from within these keys in the right pane. Always
backup the registry before making any changes so that you may import the keys
back in should anything go wrong. Haphazardly removing keys in the registry is
very dangerous and can render your system useless. Be 100% sure of what you are
doing and what you remove can be safely done.

You can Backup the registry key/s while in regedit: Click on Registry on
the menu bar while in the registry, click on “Export Registry File.�. Choose a
location, I recommend saving it to the desktop and it makes it easy to find.
Place a check next to “Selected Branch� and give the file a memorable name,
select save, make your changes and close out. If you have no problems after say
2 weeks, you can delete the exported files.
If you have problems, double click the reg file on the desktop to
import/merge it back into the registry.

Do Not back up the entire registry in the registry editor. Importing it
back while in windows can be harmful to the machine. A registry backup is
created each new calendar day a machine is booted.
If you wish to perform a new backup of the registry after the machine has
been booted, got to Start Run, type in: scanregw and hit enter. You will be
prompted that a registry has already been backed up for the day and do you wish
to create a new one, click yes.

More on Backing up/restoring the registry:
How to Back Up the Registry in Windows 98 and Windows Millennium Edition
http://support.microsoft.com/default...b;en-us;256419

HOW TO: Backup, Edit, and Restore the Registry in Windows 95, Windows 98,
and Windows Me
http://support.microsoft.com/default...b;en-us;322754

How to Manually Restore the Windows 98/Me Registry
http://support.microsoft.com/default...b;en-us;221512

--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message
...
Brian:

Thank you for your help. Please also see my reply to Gary Terhune's
message
above.

When I did what you suggest, I got all the way to
Hkey_local_machine\software\microsoft\windows\curr ent version and that was
it. There was no "run" beyond that.

I contacted Dell and they've given me lots of suggestions -- none seemed
to
work. One was to clean up start up files which I have done based on the
following from Dell:

* Run through the following steps. If you do not see a step on your
screen, just skip it and continue.

(I) RESET & CLEAR START UP PROGRAMS
Clearing the Startup Environment
Click the Start button.
Click Run.
Type msconfig in the open field.
Click the Ok button.
The System Configuration Utility appears.
Click the Startup tab.
A list of Startup Items for your computer appears.
Click to de-select items from your startup group.
Click the Ok button.
Click the Restart button.
Your computer reboots.

--------
Dell also suggested that I download and run a utility called Stinger --
this
is some kind of scanning utility from McAfee. I did so and it reported
all
clean.

The problems is that I am still getting messages from people advising that
they are getting emails from me with obscene comments and obscene headings
and sometimes with zip files that cannot be opened.

The file I mentioned \windows\rauhccup1.dll is still in quarantine under
the
bitdefender program. I cannot seem to send it to them for analysis -- I
keep
getting error messages when I enter my email server and email address.

When I selected the quarantine folder to be scanned by the various
scanners
I have used so far -- about 3 of them -- the Stinger mentioned above,
pandasoftware, bitdefender, and one other -- no virus is reported.

By the way, previous scans of the entire computer found viruses but those
have supposedly been cleaned up -- hence the file in the quarantine
folder,
for example.

I'd appreciate any other ideas you and Gary may have.

Thanks again.

AM


"Brian A." wrote:

Click Start Run, type in: regedit and press Enter
Navigate to the key:
hkey_local_machine\software\microsoft\windows\curr ent version\run

Look for a value in the right pane:
RUNDLL32.EXE %Windir%\[random value].dll,_mainRD

If found delete it.


--

Brian A.

Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm


"AM" wrote in message
...
I have had a virus - win32.mabutu@mm. May have also had bagel.
The windows\rauhccup.dll file was reported as infected. I used
bitdefender
to check and the file was moved to quarantine.
When I restarted error msg was rundll32 error file windows\rauhccup.dll
not
found.
What is the purpose of this file and how do I get a clean copy of it?
Thanks.