Home / server / Questions / 8678
Accepted
Brian Knoblauch
Asked: 2009-05-16 07:46:55 +0800 CST

What's "c:\windows\ajavuviy.dll"?

  • 772

I've got a computer spewing messages from RUNDLL about errors loading "c:\windows\ajavuviy.dll". Seems to happen mostly when idle and can generate probably 40-50 error windows pretty quick.

Google came up completely empty on this. Thinking it's probably malware related, but am unsure. Anyone run across it before?

windows dll

6 Answers

  1. Assuming this is the Vundo I think it is (or at least, the Vundo we've been seeing by the metric fuckton around the office the last 2-3 weeks) it's a virus thats a pain to remove. It creates random DLL names, but deleting the DLL's just creates error message on startup, and it simply creates more random DLL's to load.

    What you have to do to get rid of it completely:

    1) Download Microsoft process explorer (http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx).

    2) Expand the rundll process.

    3) Delete the giberish DLL's attached to rundll (this will delete the part of the virus that keeps replicating)

    4) Go into MSConfig and delete the startup entries for all DLL's of strange names.

    5) reboot and the virus will no longer be able to replicate, since you delete its parents.

    • 7
  2. Best Answer

    Try running the registry cleaner part of ccleaner - that will at least remove the possibility that it's just an artefact of something you've uninstalled.

    • 2

  3. Right-click on it and get properties and look at the info in the Version tab. If it's empty then I'd place it under high suspicion. If there is info in there including the author / company, version #, date, etc. then it's more likely ok.

    EDIT: PS - Make a copy of it and bang it against your favorite (up-to-date) virus/malware scanner.

    • 1

  4. Viruses like to create DLLs with randomized names. This is most likely a virus. Do a scan immediately.

    • 1

  5. If a Google search did not come up with anything (and it doesn't, I checked), it would be a relatively safe assumption that it is some sort of malware/spyware as many of them dynamically generate unique filenames. I would not think it is a "virus" though.

    First thing I would do is run "msconfig" from start->run and look through your startup section to disable anything fishy and reboot.

    You can also try to rename that dll to something like ajavuviy.dll.bak to see if anything breaks.

    Run a good adware/malware scan such as Ad-Aware.

    • 1

  6. To be sure it's not malware, run the Microsoft Malware Removal tool, just by typing 

     mrt.exe

    in your search box / run box.

    • 1