kfxhpucf.dll and wxtcqbhk.dll

Discussion in 'malware problems & news' started by net24, Nov 25, 2007.

Thread Status:
Not open for further replies.
  1. net24

    net24 Registered Member

    Joined:
    Nov 25, 2007
    Posts:
    1
    Hi,

    Process explorer has highlighted in purple two unassigned dlls. They appear to be used by the explore.exe process. I googled both dlls but I have not been able to find any information. Does anyone know what these two dlls are and if they are malware.

    Thank you,

    Net24
     
  2. fcukdat

    fcukdat Registered Member

    Joined:
    Feb 20, 2005
    Posts:
    569
    Location:
    England,UK
    Elevated probability that they are malware related(lack of google results)+ randomized names.

    Using PE data can you see where they are located on the HD(e.g system32 folder) ?

    If so can you locate them and upload to VirusTotal service for malware checking.
    http://www.virustotal.com/
     
  3. Kosak

    Kosak Registered Member

    Joined:
    Jul 25, 2007
    Posts:
    711
    Location:
    Slovakia
    Hi!

    These files will be malware - 99,99%. Download UnDLL => http://www.nod32.it/tools/undll.zip

    I recommend to use this utility in safe mode.

    1) Choose "Select infected DLL"
    2) Find infected DLL file
    3) OK, then start cleaning process
    4) Restart PC

    :thumb:
     
  4. noway

    noway Registered Member

    Joined:
    Apr 24, 2005
    Posts:
    351
    Google explore.exe and you will get lots of hits. It's not a Windows process.
     
Thread Status:
Not open for further replies.