Am I infected with trojan? help

• alkaiden

  12 Sep 06, 20:05

  When I start my computer today, theres a message saying
  
  Windows cannot find C:\WINDOWS\rundl132.exe', make sure
  you typed the name correctly, the retry again'
  
  after i close this it says
  
  'Windows cannot load or run C:\WINDOWS\rundl132.exe in your directory. Make sure it exist, or else remove the reference to it int he directory. To search for the file, click start, then click search'
  
  then i did i search with AVG and a virus is detectedin my temp folder but i dont know how to deal with it...
• alexkusu

  12 Sep 06, 20:05

  nope..
• alkaiden

  12 Sep 06, 20:07

  uhh...then what is it? everytime i start my com, the msg will appear
• alvin-ncs

  12 Sep 06, 20:19

  me too
• ndmmxiaomayi

  12 Sep 06, 20:37

  http://www.bleepingcomputer.com/startups/not_used-15035.html
  
  http://vil.nai.com/vil/content/v_100735.htm
  
  http://www.sophos.com/security/analyses/w32inmotecda.html
  
  Try letting AVG to clean it...
  
  Exact location of rundll32 is C:\WINDOWS\system32 if you are using Windows XP. In caps, it looks like this: RUNDLL32
  
  The L shouldn't be replaced by numbers...
• alkaiden

  12 Sep 06, 21:56

  thanks for the reply...is it ok if i juz delete rundl132 in the folder?
• ndmmxiaomayi

  13 Sep 06, 11:11

  If AVG can't do it, you can delete it. Make sure it is quarantined before deleting.
• kaobeikaobu

  13 Sep 06, 12:03

  seems that it has also modified ur registry...
  might have to remove it from registry as well