ncompat.tlb file found,

Discussion in 'Malware Help (A Specialist Will Reply)' started by Norby, Feb 19, 2006.

  1. Norby

    Norby Private First Class

    Hi,I found this file ncompat.tlb in my C:\WINDOWS\SYSTEM32 Folder and the date on the file is 12/06/2005 . I read that this might be a part of malware,is it safe to delete this file. I have ran all my scans for malware/spyware and I'm clean,my computer is running very good. I'm just curious about this file,can anyone tell me about it.

    XP Pro SP2
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    It's safe to delete that file as it's part of Trojan.Zlob. You may also want to run the online scans listed in the READ ME to make sure nothing else is there.
     
  3. Norby

    Norby Private First Class

    Thank you bjgarrick,I did run all the online scans and came up clean. I have ran everything from READ ME.
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If the online scans came up clean you should be good to go. If you like you can attach a current HJT log to confirm but that's up to you.

    Are you having any current problems?
     
  5. Norby

    Norby Private First Class

    Thanks again,I'm not having any problems,system is running very good. I'm pretty sure my HJT log is good but I have attached it for you to confirm.
     

    Attached Files:

  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and check the boxes for the following entries:
    ( Make sure ALL browser windows are closed when you click FIX )

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost

    Again, make sure ALL browser windows are closed when you click FIX.

    Now navigate to and DELETE the following if they should remain:

    C:\WINDOWS\SYSTEM\blank.htm

    Next, run CCleaner to clean up cookies and temp files.

    After you comlplete the above you will be good to go. Reboot and let me know how things are running.
     
  7. Norby

    Norby Private First Class

    I fixed the two that you told me to in HJT and I could not find C:\WINDOWS\SYSTEM\blank.htm which is good everything. All is running very good on this end. Thank you so much bjgarrick for your time and help.
     
  8. Norby

    Norby Private First Class

    I don't know if this makes a difference but I could only fix
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost ,,,,,,,,,, in safe mode. Just thought I would tell you,thanks again.
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Okay! Are you having any current problems?
     
  10. Norby

    Norby Private First Class

    No problems at all,thanks again.
     
  11. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds