Hey guys i have got a question…on my laptop everytime i start it up i get a RunDLL error message. which states; “Error loading C:\Windows\system32\xxyxWqom.dll” I was wondering if you could help me with this…

Although your system has a pop-up saying it cannot load the C:\Windows\system32\xxyxWqom.dll, it’s actually fooling you into believing that this is a critical file!  Unfortunately, this .dll is a known trojan.vundo and needs to be removed.  I recommend you follow the steps below to take care of your error message on startup, as well as it will make your system much cleaner and safer!

First, lets try to delete the file it is looking for.  You need to enable windows to Show All Files and Folders.  Instructions for most Operating Systems can be found Here.  Look for the C:\Windows\system32\xxyxWqom.dll.  If you can see it, delete it, if not, it isn’t something to panic about.  This step is more precautionary!

Next do a scan with Malwarebytes’ Anti-Malware .

  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select “Perform Quick Scan”, then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. (You may need this for a later post on the forums!)

After, download VundoFix.exe to your desktop

  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it’s done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please save the contents of C:\vundofix.txt in case the infection is not removed, it will need to be posted with your HijackThis log in the malware forum.

Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from “Click the Scan for Vundo button” when VundoFix appears upon rebooting.

This should remove your pop-up!  If you still have issues, please post a HJT log in the forum and someone should be along to take care of your infection!  Good luck!

Related Posts