Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

annzmdd.dll

Feb 17, 2004 9:15AM PST

I have not been able to delete this file via adaware, spybot, code stuff starter, stinger or hijackthis and am unable to delete from the registry using regedit. appreciate any thoughts.
Logfile of HijackThis v1.97.7
Scan saved at 9:09:55 PM, on 1/1/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Kazaa Lite K++\KazaaLite.kpp
C:\WINDOWS\System32\PackethSvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\PROGRA~1\AMERIC~1.0\aoltray.exe
C:\PROGRA~1\AOLCOM~1\COMPAN~1.EXE
C:\Program Files\AIM95\aim.exe
C:\Program Files\hijackthis\HijackThis.exe

O4 - HKLM\..\Run: [annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\RunOnce: [*annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab

Discussion is locked

- Collapse -
Re:annzmdd.dll
Feb 17, 2004 9:47AM PST

You have startup entry for Kazaalite. As per http://www.sysinfo.org/startuplist.php?filter=KazaaLite&count=&type= it is not necessary to let KazaaLite.kpp to load during startup.

Kazaalite is a file sharing client - not to be confused with the original Kazaa program. Unlike the original, this one does not contain any advertising or tracking mechanisms

Your log doesn't show the complete log for items 04, please save your log by clicking on Save log then copy and paste the log file again.

Important: You need to run Hijackthis.exe in its own folder. First, create a new folder on your C Drive (example: C:\HijackThis) and extract the HijackThis.exe from the zip file into the new folder and run it from there. HijackThis MUST run from it's own folder (not the Desktop or Temp folders) as backups created in the temp folder will be soon lost.

With regards to annzmdd.dll, try to locate or find the file annzmdd.dll then upload it to http://kaspersky.com/remoteviruschk.html then post back the result of the virus check.

You can also post your Hijackthis log at the following forums:
Tom Coyote
Gladiator Security Forums

Spywareinfo.com is not available for now.

- Collapse -
Re:annzmdd.dll
Feb 17, 2004 9:52AM PST

I see it twice:

O4 - HKLM\..\Run: [annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1

O4 - HKLM\..\RunOnce: [*annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1

I am NOT an expert in HijackThis files. Make a backup of the registry - in case something goes wrong. Then go into SAFE MODE and try to delete these 2 files.

- Collapse -
Re:Re:annzmdd.dll
Feb 18, 2004 9:06PM PST

I'll relocate HijackThis and try again. Thanks for the other suggestions. I will try them and post the results,
however it may take a day or two as it's my daughter's computer and access is a challenge. I've tried searching but havent been able to find this file ?!

- Collapse -
Re:Re:Re:annzmdd.dll
Feb 18, 2004 11:19PM PST

Hi,
The file is maybe hidden. Make sure that the "Show hidden files and folders" is selected. To do this, Open Windows Explorer, click Tools, click Folder Options the select View tab, scroll down until you'll see "Show hidden files and folders" - select it. Click apply and OK.

Open Windows Find or Search utility and look for annzmdd.dll

Happy

- Collapse -
Re:annzmdd.dll
Feb 18, 2004 11:37PM PST

These 2 files:

O4 - HKLM\..\Run: [annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1

O4 - HKLM\..\RunOnce: [*annzmdd] rundll32 C:\WINDOWS\System32:annzmdd.dll,Init 1


What to do:
Use PacMan's Startup List to find the entry and see if it's good or bad.
If the item shows a program sitting in a Startup group (like the last item above), HijackThis cannot fix the item if this program is still in memory. Use the Windows Task Manager (TASKMGR.EXE) to close the process prior to fixing.

http://www.sysinfo.org/startuplist.php

- Collapse -
Re:annzmdd.dll
Feb 18, 2004 11:34PM PST