Forum Home
Press F1
 
Thread ID: 56508 2005-04-07 05:37:00 qpidgen.dll dennisa (7825) Press F1
Post ID Timestamp Content User
342376 2005-04-07 05:37:00 Norton AV 2005 has quarantined to backup file qpidgen.dll

At start up windows 98 reports unable to find qpidgen.dll

Please advise what action I need to take
dennisa (7825)
342377 2005-04-07 05:47:00 You could try in the startup tab of msconfig, selectivly switch each one off in turn to see if that fixes it.

Next step would be a reg search for startup and see if it is located there.
Rob99 (151)
342378 2005-04-07 05:47:00 Upon researching you have a worm (worm_mabutu.a) see here (www.trendmicro.com)
for more info on removal etc :thumbs:
Overdrive_5000 (4950)
342379 2005-04-07 05:52:00 Thats a good link Overdrive, gives proper instructions to my second method.

To be safe right click the key you are going to change and Export, this will allow an easy fix if all goes wrong.
Rob99 (151)
342380 2005-04-07 06:11:00 Thats a good link Overdrive, gives proper instructions to my second method.

To be safe right click the key you are going to change and Export, this will allow an easy fix if all goes wrong.

Thanks for reply rob99, however I should explain I am a wrinkly newbie and don't understand your advise. Should I restore the quarantined file, as Norton seems not to have repaired/replaced it, and the sys complains at start up ?
dennisa (7825)
342381 2005-04-07 06:23:00 Upon researching you have a worm (worm_mabutu.a) see here (www.trendmicro.com)
for more info on removal etc :thumbs:
Thanks again; I should have said that Norton reported the threat as w32.mota.b@mm,
I guess that changes the fix, sorry.
dennisa (7825)
342382 2005-04-07 06:42:00 w32.mota.b@mm is the same as worm_mabutu.a just a different name so the removal instructions will be the same 2 :thumbs: Overdrive_5000 (4950)
342383 2005-04-07 07:27:00 Should I restore the quarantined file, as Norton seems not to have repaired/replaced it, and the sys complains at start up ?You don't want to restore the file. After you have followed the steps to manually clean your machine, you won't get that message any more. :)

As you are using Norton's, they have a manual removal instruction guide as well - W32.Mota.B@mm (securityresponse.symantec.com). Follow the removal instructions and make sure you do all the steps including the registry key deletion part. These instructions are basically the same as posted before.

If any part of those instructions are confusing, please just ask for further clarification. :)
Jen (38)
342384 2005-04-09 00:56:00 Thanks to all who have offered advise. I shall follow the Norton fix suggested by Jen. Kind regards dennisa (7825)
1