What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Unknown Dll

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Avg free found a trojan on my machine and identified it as (backdoor.small.22.z) using C:\WINDOWS\System32\rdpcfger.dll . However I searched every search engine I could find and recieved no confirmation from any of them. Avg did delete rdpfger.dll and Hijack this found the entry in my registry. I then made a search of the registry and found it in "browser helper objects". My question is, can this be a brand new trojan since I couldnt find any info at all. This my log with Hijack this. Logfile of HijackThis v1.99.1 Scan saved at 7:31:35 PM, on 3/9/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Tiny Personal Firewall\persfw.exe C:\Documents and Settings\mel\Desktop\downloaded\hijackthis\HijackThis.exe O2 - BHO: rdpcfger - {5DE7E9F0-1968-B561-FB7C-B1FD5E5840EE} - C:\WINDOWS\System32\rdpcfger.dll (file missing) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: Tiny Personal Firewall (PersFw) - Tiny Software - C:\Program Files\Tiny Personal Firewall\persfw.exe Thank you for any answers you can give on this topic.
Post #2
Hello melc00, Welcome to TomCoyote forum. Is that your whole log? One of the smaller logs I have seen. Just check to make sure you posted it all. Also check this: Internet Explorer v6.00 SP1 (6.00.2600.0000) as it looks like critical IE updates are missing? IE > Tool > Windows Updates and install all critical updates suggested for your system.

Here is the item: O2 - BHO: rdpcfger - {5DE7E9F0-1968-B561-FB7C-B1FD5E5840EE} - C:\WINDOWS\System32\rdpcfger.dll (file missing)
Google does not identify it so we call it a random named trojan, malware writers create this junk faster than they can be named. The AVG name gave to it does not read either. I do wonder why properly updated AVG software did not stop it. I will have you remove the item and then I want you to run a free online trojan scan for a second opinion. Have this scan fix anything it locates and let us know the exact name and location of anything it can not clean or quarantine. Then update AVG and run a complete system scan with it.

Scan with HijackThis then check the box in front of this item:

O2 - BHO: rdpcfger - {5DE7E9F0-1968-B561-FB7C-B1FD5E5840EE} - C:\WINDOWS\System32\rdpcfger.dll (file missing)

Close all programs but HJT and all browser windows then click on "Fix Checked"

Empty the recycle bin and restart the computer.

Run this free scan according to the directions above, scan the complete C drive
http://www.windowsecurity.com/trojanscan/

Update and scan the complete system with AVG

Stay in this thread use ADD REPLY post a new log along with any comments.

Thanks…pskelley
TomCoyote forum
Slyware Warrior
Post #3
Member has not posted since 3/12/2005


If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI