RUNDLL

[iaing]

Every time I switch on my PC a RUNDLL error appears after windows open up.
It says Error Loading C:\WINDOWS\fcccba.dll, and The specified module could not be found.

This has only appeared over the past few days and seems to coincide with pop-ups getting past my blocker. Norton and Adaware haven't found anything.

Any suggestions?

 

[pablo666]

the below is the result of a search on:

http://www.spywaredata.com/spyware/malware/fccba.dll.php


There are 2 variants of fccba.dll in our database.

# File Size Threat Company Name File Locations CLSID
1 27 KB Virtumondo [Not Available] [%system32%]\ {00DBDAC8-4691-4797-8E6A-7C6AB89BC441}

2 275 KB Under Review [Not Available] [%system32%]\

It looks like you have had some spyware on your machine. Possibly something called Virtumondo.

Have a look at the website and see if you can work it out.

Paul

 

[ovenpaa]

Every time I switch on my PC a RUNDLL error appears after windows open up.
It says Error Loading C:\WINDOWS\fcccba.dll, and The specified module could not be found.

This has only appeared over the past few days and seems to coincide with pop-ups getting past my blocker. Norton and Adaware haven't found anything.

Any suggestions?

Fccba.dll is malicous. It may have been cleaned by your current AV or may still exist but not be loading correctly, either way you need to do a complete search on your machine for the dll and confirm it is not on the machine, if you find it then delete it - you may need to unregister it (regsvr32 /u /s fccba.dll) If you don't find it then you need to see where it is being referenced from, most likely the registry and you can check using MSCONFIG at the run line or check the registry (Start > Run > Regedit > OK)

Post back if you need more help

EDIT - Pablo beat me to it

However this rings a bell, I seem to remember if it is still registered as a dll it is a swine to get rid as it creates an ini file in an obscure location - last time I saw this it had to be removed via the recovery console - fun but no great hardship.

 

[centaur]

It's spyware. Get yourself a decent A/V instead of Norton, something like AVG (free) or Avast (free). Also get Spybot S & D (free) AND...keep them updated daily.

 

[ovenpaa]

It's spyware. Get yourself a decent A/V instead of Norton, something like AVG (free) or Avast (free). Also get Spybot S & D (free) AND...keep them updated daily.

I think the AVG engine will struggle to get rid of this but it should detect it without issues

 

[iaing]

I've tried AVG and Spydata but they haven't found anything.

I did MSCONFIG and in the startup tab, fcccba was ticked - should I untick it?

 

[ovenpaa]

I've tried AVG and Spydata but they haven't found anything.

I did MSCONFIG and in the startup tab, fcccba was ticked - should I untick it?

You can but it will be back when you restart the box, do a search for the file - does it show? Make sure your search includes hidden files and folders

EDIT - read from the start again, if it does not show untick the file in MSCONFIG and restart, what happens?