Trend Micro Identified Threat but Cannot Quarantine

ske

Distinguished
Sep 3, 2009
6
0
18,510
0
Trend Micro Internet Security 2009 identified a potential trojan horse infected file dchn.sco in the system32 folder. It could not quarantine it, and I could only delete using Unlocker. Now that the file is deleted I am getting a RUNDLL error popup upon startup. "The Specified module dchn.sco could not be found"

I have determined that dchn.sco is not a file that belongs on my system to begin with, so good riddance. But now it looks like I have some manual registry clean up to do.

Can anyone tell me how to clean up my loose ends on this one?

Thanks,

Steve
 

ske

Distinguished
Sep 3, 2009
6
0
18,510
0
Thanks guys. I tried ccleaner and glary utilities with no effect.
Trend Micro just sent a fix. Disk Cleanup, then run their program TwinFix.exe.
I'm going to give that a try with fingers crossed.
 

ske

Distinguished
Sep 3, 2009
6
0
18,510
0
Just tried it. TwinFix removed the offending file, and I still get the rundll error.

I guess it's better than having the virus. More like a hangnail...
 

ske

Distinguished
Sep 3, 2009
6
0
18,510
0
hijackthis.exe tracked down the offending leftovers.
Great program! I just needed to dig up a guide online to interpret the results.
 

pc cleaner

Distinguished
Oct 25, 2009
8
0
18,520
1
You could try booting into safe mode first, and then try your usual removal process :) this should probably fix it.

Failing that, you could try another file shredding tool in safe mode. Which should remove and fix it. Let us know how you go :)



pc cleaner - http://helpcleaningmypc.info/
 

btk1w1

Distinguished
Oct 13, 2008
173
0
18,660
13
The dll files needed to be unregistered then deleted.

HJT is definitely a good way to ID the offending start-up items and remove them.

Another good tool is winpatrol by BillP Studios.

Good to hear you solved the problem.

P.S. you can get an automated analysis of your HJT log at:

http://www.hijackthis.de/

You copy and paste the contents or browse for the text file and submit it. It is best to be used as a guide but coupled with researtch is very effective.
 

ske

Distinguished
Sep 3, 2009
6
0
18,510
0


Thanks for the link. Hopefully I won't need it!
 

ehn

Distinguished
Mar 6, 2010
1
0
18,510
0
Thanks so much for bringing up this topic and finding a fix, ske!

I got the same message at startup (RUNDLL error, specified module dchn.sco could not be found) after I cleaned up after an AVG scan. Tried HijackThis and it worked.

Since I'm a bit of a novice, I found this to be helpful:

Make sure to backup your files.
Set up a system restore point.
Download and run HijackThis (found it on majorgeeks.com).
If you're having trouble finding the offending registry item, you can make sure to create and save a log before the system does the scan (which for me opened in a Notepad), then do a search for "dchn" in Notepad, then go back to find the item on the scan list, check the box, and remove.
 
Thread starter Similar threads Forum Replies Date
S Antivirus / Security / Privacy 11
A Antivirus / Security / Privacy 1
S Antivirus / Security / Privacy 1
BlueMustache Antivirus / Security / Privacy 5
G Antivirus / Security / Privacy 1
Rogue Leader Antivirus / Security / Privacy 1
Paul Wagenseil Antivirus / Security / Privacy 3
G Antivirus / Security / Privacy 0
C Antivirus / Security / Privacy 3
T Antivirus / Security / Privacy 2
Mr Davo Antivirus / Security / Privacy 3
G Antivirus / Security / Privacy 1
mitchmatch Antivirus / Security / Privacy 5
N Antivirus / Security / Privacy 4
U Antivirus / Security / Privacy 9
sscroggin Antivirus / Security / Privacy 3
G Antivirus / Security / Privacy 5
M Antivirus / Security / Privacy 7
joe2cool Antivirus / Security / Privacy 4
Z Antivirus / Security / Privacy 1

ASK THE COMMUNITY