Lxsyfcic.dll - Possible Virus

[VernonRobinson]

Received the following error on reboot today. The file has a txt extension, but it contains binary data. Malwarebytes shows nothing. Any ideas?

[Peru]

That may be a Lexmark driver file. Do you have any Lexmark products installed?

[TreeTopsRanch]

Sure looks like Lexmark driver. Google has some info on how to fix that error. Just google: "what is lxsyfcic.dll"

[VernonRobinson]

I do not have any Lexmark Products which is what made me suspicious. I had seen the comments about it being a lexmark driver. However, it is referring to a ".dll". the file in the directory is ".txt" Looking at it with notepad and it looks like it possibly a binary file. Also it is the only file in the directory. So there must be something in the load sequence that is asking for the ".dll" file to be loaded, but I am not sure what it would be.

-Vernon

[Bob]

The good news is that the dll is missing. You can check the txt file to see if it contains malware at VirSCAN.org. At the top of the web page, browse to the file on your computer and upload. The good thing about this site is that the uploaded files are scanned by multiple antivirus engines which should increase the likelihood that malware won't be missed.

Go to the control panel, uninstall a program and see if anything is installed that shouldn't be. You can click on the installed date header and sort by date to identify recent installs.

You can also run msconfig.exe and click on the startup tab to identify programs that are loaded at boot time.

[TreeTopsRanch]

Good advice from Bob. Be sure to look for something that was installed on the 14th of Nov, 2013. That date is a clue.

I found a reference to both files here: http://contents.driverguide.com/content ... sysdrv.inf

It appears that lexmark creates that txt file but why I don't know.

[TreeTopsRanch]

Another idea...That directory in the photo of your error message is LItiton. What exactly is that second letter a l or a 1 or a capitol i or what. I took it as a capitol i but that may be incorrect.

If you can figure that one out try to google that word.

[VernonRobinson]

Another idea...That directory in the photo of your error message is LItiton. What exactly is that second letter a l or a 1 or a capitol i or what. I took it as a capitol i but that may be incorrect.

If you can figure that one out try to google that word.

We are thinking the same. I tried it with an I and L but did not get any hits.

-Vernon

[VernonRobinson]

The only thing that was installed on 11/14 was the Microsoft Access database engine 2010. This is a runtime to allow people without Access to run an Access database.

The thing that is strange about this is that this is the only file in the subdirectory. It is almost like an incomplete uninstall of some program.

I looked through MSConfig and nothing looked out of the ordinary to me. I looked in the Registry and it was in the Windows/CurrentVersion/Run node. I just deleted the branch. Now I will restart the machine.

-Vernon

[VernonRobinson]

Once I removed the registry entry, the message went away. Right now every thing seems to be functioning. It is still quite puzzling. Thanks for the suggestions. I will keep my eye on this one.

-Vernon