RUNIE.DLL - Dangerous
%SysDir%\RUNIE.DLL
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
RUNIE.DLL is known as: Infostealer.Gampass [Symantec] Gen.Variant.Downloader [Ikarus] Win-Trojan/Onlinegamehack.65536.CI [AhnLab].
MD5 of RUNIE.DLL = 971A252605748DBB4D78135887FB686C
RUNIE.DLL size is 65536 bytes.
Full path on a computer: %SYSTEM%\RUNIE.DLL
Related Files:
%COMMONAPPDATA%\TENCENT\DESKTOP\GLOBAL.DB
%APPDATA%\TENCENT\QQPCMGR\DOWNLOAD\QQPCMGR_SETUP.EXE.TDL
%APPDATA%\TENCENT\QQPCMGR\DOWNLOAD\QQPCMGR_SETUP.EXE.XFTP
%TEMP%\1272609206.IDX
%TEMP%\7ZIPSFX.000\QQDOWNLOAD.DLL
%TEMP%\7ZIPSFX.000\QQPCDOWNLOAD.EXE
%TEMP%\BAIDU.EXE
%TEMP%\BAIDU.EXE.INI
%TEMP%\BAIDUGAMEHAO123.EXE
%TEMP%\DOWN.INI
%TEMP%\DUOMIMUSIC_KUN001.EXE
%TEMP%\DUOMIMUSIC_KUN001.EXE.INI
%TEMP%\E40D284E2552B3921B3E40DDF6A7121A.TPT
%TEMP%\NSK40.TMP\SYSTEM.DLL
%TEMP%\NSU3F.TMP
%TEMP%\PINYIN_SETUP.EXE
%TEMP%\PINYIN_SETUP.EXE.INI
%TEMP%\PLAYGAME.EXE
%TEMP%\PLAYGAME.EXE.INI
%TEMP%\PPTV(PPLIVE)_FORQD317.EXE
%TEMP%\PPTV(PPLIVE)_FORQD317.EXE.INI
%TEMP%\QQPCDOWNLOAD60116.EXE
%TEMP%\[FILENAME OF THE SAMPLE #10]
%TEMP%\[FILENAME OF THE SAMPLE #12]
%TEMP%\SETOFF.TXT
%TEMP%\SETUP_IEANGELS.EXE
%TEMP%\SETUP_IEANGELS.EXE.INI
%TEMP%\TAO.EXE
%TEMP%\TAO.EXE.INI
%SYSTEM%\AUTOIE.INI
%WINDIR%\TEMP\OLD2D.TMP
%WINDIR%\TEMP\OLD30.TMP
%WINDIR%\TEMP\OLD33.TMP
%WINDIR%\TEMP\OLD36.TMP
%WINDIR%\TEMP\OLD39.TMP
%WINDIR%\TEMP\OLD3C.TMP
%SYSTEM%\NOVIEWRUN2.DLL
%SYSTEM%\RUNIE.DLL
%SYSTEM%\SERVICE.EXE
%SYSTEM%\TSTRI.DLL
%SYSTEM%\WBEM\PERFORMANCE\WMIAPRPL_NEW.INI