msvctvrl.dll - anyone know about this file?

Hi,

I received a message from Norton saying it removed a threat called Infostealer and required a restart. After the restart, I started receiving an error message that the file msvctvrl.dll could not be found and could not start the application on Adobe programs and many other places. I spent all of today with another help forum. In the end, the tech gave up. This file is not found on my computer yet programs are asking for it and won't open when it's not found. It's not a valid Windows file. I found one place that even mentions it but doesn't give much information.
http://spywaredlls.prevx.com/RRHDGH43442629/MSVCTVRL.DLL.html

I cannot restore my system to an earlier point because it fails due to not finding this file. We have tried everything we can think of.

Does anyone have any information or ideas on this?

Thank you very much for any assistance you can provide.

 

I am having the same problem. Any help would be greatly appreciated.

 

Got the same exact thing happening. So I guess Infostealer is what is going on here. I had the same deal. Norton removed it, then got same error Msvctvrl.dll was not found. Affecting most adobe products, and trillian and outlook and yahoo messenger and probably others I havent tried yet. PLEASE help! Ill check back in a while to see if anyone has any ideas.

 

lol well Prevx when I try to install I get this.

Wscript.exe - unable to locate component.

This application has faild to start because msvctvrl.dll was not found. Re-installing the application may fix this problem.



Ill look at the sticky. This is my work computer that I use for video and graphic editing for my profession..

 

No luck :cry

 

No Im scared to overwrite all my programs I have. :confused

 

Found a fix !!

If you have another computer or access to one, go to Windows/System32 and find the file IMM32.dll (this is the file where the MSVCTVRL.DLL is found) and save a copy on a flash drive. Go to the infected computer and rename this same file. We renamed it to IMM32.old. Then take the clean IMM32.dll file from the uninfected computer and paste it in. All of my programs open and work normally now.

I have been working with Bill Castner from the Aumha forum for 3-4 days. He has been absolutely wonderful and has helped me through it all the way.

Good luck with it.

 

Jricee,

This worked, Thank you so much.

You saved my computer

 

This is for anyone who views this thread, searches keywords or finds this thread thru search engines.

The file "msvctvrl.dll" is malware. It's a trojan that works by code injection into kernel files. The mentioned file "msvctvrl.dll" installs itself into the "imm32.dll" file which is located in C:\WINDOWS\system32 and is the tree that contains the following files by default:

Code:

USER32.DLL
NTDLL.DLL
KERNEL32.DLL
GDI32.DLL
ADVAPI32.DLL

To resolve this, you must have your Windows XP disc or have access to one.

Please note that copying the file from another computer is illegal per Microsoft's License Agreement.

Follow the below after you have inserted your WinXP disc...

This is assuming you have Windows installed to the C:\ drive and also your CD/DVD Drive as D:\ drive.

Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file copyme.bat and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the copyme.bat file on your desktop.

After you have completed this, you should then follow the steps in the thread below and then post your logs in the Malware Removal Forum.

READ & RUN ME FIRST. Malware Removal Guide