[Hazydaisy]

I turned on my computer the other day and I got a msg saying that my windows security wasn't on and I could get infected. I tried to turn it on and it wouldn't allow me. I tried the system restore but all previous information had been wiped and I could only go to the day before. I searched the net and apparently there were quite a few people that went down with the same problem on the same day. Someone used Avast to get rid of the problem. I used it but while the computer was rebooting it asked me did I want to put the trojen in the chest. I wasn't sure so I said yes to everything. It worked, everything seems to be working perfect except I now keep getting the message: error loading C: \WINDOWS\system32\gmcsieko.dll The specified module cannot be found. I've searched the net for this particular dll and cannot find it. As I say the computer works fine but the message is annoying me. Any suggestions pls.:4-dontkno

 

[Bounky37]

This usually means that you got rid of the file that gets activated for the virus, but not the part that activates it. Your computer is fine, but you need to find the source thats trying to start up. Check your start up files and try to find one that looks malicous of sorts.

 

[Hazydaisy]

Not sure how to do that. Sorry a bit of a numpty when it comes to the technical side.:sigh:

 

[cetkat]

Download the Microsoft program Autoruns.

Select 'Everything', and look under 'Image Path' for all the items. If you see anything that says C:\WINDOWS\system32\gmcsieko.dll either uncheck it or delete the entry.

 

[Hazydaisy]

Thank you to both of you, it worked!:grin:

 

[cetkat]

Glad we could help! :wink:

 

[Hazydaisy]

Have another problem, not sure if it is to do with getting rid of the said .dll or not. Everytime I log into the computer I have to reset the date, it always goes back twenty years or so. I've gone into control panel yet it still goes back. Can you help me?

 

[cetkat]

Well, the anti-virus is what deleted the .dll. Those entries in autorun are just what was pointing to that file, telling it to run. Getting rid of those simply got rid of the error message. Gmcsieko is not a file that's supposed to be there, so not having it isn't what's causing the problem. What it could be, is that avast didn't get rid of the malware as well as you thought or it caused some damage before it got caught. Did your windows security come back on after it finished?

I'd make sure avast is all updated and do another detailed scan along with an online Panda scan. And see what they say.

Even if it comes back clean, I'd also go ahead and complete the steps here: IMPORTANT - Read This Before Posting For Malware Removal Help and post the requested information in the HijackThis Forum. They can tell you whether or not your system is clean. If it is, then you can get more help here.. but there's no point in fixing the clock if it's being caused by something else.