Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.
1 - 6 of 6 Posts

·
Registered
Joined
·
6 Posts
Discussion Starter · #1 ·
I use CC to organize my start up and have noticed this entry. I have no idea what it is or if it's safe. Can anyone explain it please? Yes HKCU:Run Qcihunqpx rundll32 "C:\Users\user\AppData\Roaming\vi-VN6.dll",tysnpn
 

·
Registered
Joined
·
97 Posts
It's a Basic 6 dll. Export the key and then delete it. Also, rename the vi-VN6.dll to vi-VN6.bak.
If nothing untoward occurs you're ok. If errors pop up read carefully and post.
 

·
Retired Moderator Retired Malware Specialist
Joined
·
56,593 Posts
elee
you are not authorised for malware advice or removal help
it should be obvious to you that when a post is in security, it is likely to be malware related
Before you answer in future, please make sure you do know what you are advising about. Your fix would have just hidden the start up entry for that 1 part of this malware and left the rest to do its nefarious deeds
 
1 - 6 of 6 Posts
Status
Not open for further replies.
Top