IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
I use CC to organize my start up and have noticed this entry. I have no idea what it is or if it's safe. Can anyone explain it please? Yes HKCU:Run Qcihunqpx rundll32 "C:\Users\user\AppData\Roaming\vi-VN6.dll",tysnpn
Back up your registry with ERUNT (download from http://www.larshederer.homepage.t-online.de/erunt/).
Open the registry with run regedit. Steer to the key or do a search for vi-VN6.dll. When you find the key choose registry -> export registry file. After naming the export file delete the key and close regedit.
If anything goes wrong on the edit the registry can be restored with ERUNT.
you are not authorised for malware advice or removal help
it should be obvious to you that when a post is in security, it is likely to be malware related
Before you answer in future, please make sure you do know what you are advising about. Your fix would have just hidden the start up entry for that 1 part of this malware and left the rest to do its nefarious deeds
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!