1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive Advice needed for Virus in C:\Windows\SysWOW64\dnsapi.dll

Discussion in 'Malware and Virus Removal' started by hawk22, 2016/04/16.

Thread Status:
Not open for further replies.
  1. 2016/04/16
    hawk22

    hawk22 Geek Member Thread Starter

    Joined:
    2002/01/31
    Messages:
    1,991
    Likes Received:
    26
    [Inactive] Advice needed for Virus in C:\Windows\SysWOW64\dnsapi.dll

    Hi,a friends Lenovo ThinkPad seems to be infected with Win32:patched-AWK [Trj]

    The File infected is: C:\Windows\sysWOW64\dnsapi.dll

    The OS is Windows 10 Home on a 1TB HDD no partitions.

    I have tried several AV programs they all come up with the same Virus in the same file, and all also can not remove the Virus as the file infected is a essential Windows file.

    Unfortunately he is a first year Uni Student that needs his comp on Monday.
     
    hawk22,
    #1
  2. 2016/04/16
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Hi,

    Read this post as indicated at the top of this forum & follow the instructions.

    P.S. I doubt you'll get this cleaned by Monday. Quick fix: Format & reinstall.
     
    Admin.,
    #2


  3. to hide this advert.

  4. 2016/04/16
    hawk22

    hawk22 Geek Member Thread Starter

    Joined:
    2002/01/31
    Messages:
    1,991
    Likes Received:
    26
    Thanks Arie, Sorry, my mistake.

    When I download the" Farbar Recovery Scan Tool" Copy it to the Desktop and run it I receive a Error like this:

    Autolt Error
    Line 18555 (File" "):
    Error: this keyword cannot be used after "Then" keyword

    Windows 10 it is the 64 bit version as I tried 32 bit but get told to use 64 bit.
    Downloaded 3 times, but always the same result.
     
    hawk22,
    #3
  5. 2016/04/16
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ========================

    The above error has been corrected.
    Download fresh copy of FRST.
     
    broni,
    #4
  6. 2016/04/17
    hawk22

    hawk22 Geek Member Thread Starter

    Joined:
    2002/01/31
    Messages:
    1,991
    Likes Received:
    26
    Thanks broni,
    Since the guy needs his comp tomorrow, Sunday night now here in Aus we could not wait.
    Tried the windows 10 reload, (my first and last touch of 10) through the Update and Security Reset this PC and Remove Everything, but that didn't work hung at 66% and would go no further.
    So we stuck in the win 10 USB stick and reloaded from that.
    It is working but I doubt if the Virus got removed completely
    I had asked him to run a scan with AVG to see, but I haven't heard back.
    hawk22
     
    hawk22,
    #5
  7. 2016/04/18
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    No problem :)
     
    broni,
    #6
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...