Not Virus Exactly...

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Thadian, Sep 10, 2005.

  1. Thadian

    Thadian Private E-2

    Well, my problem is less of a Virus threat as much as an At-Risk threat.

    I have scanned my computer numerous times... no viruses... I'm not having any technical diffculties, but everytime I run Norton, I get two files that are "at-risk" and when i try to delete them, it says "Delete Failed". I looked up both of these files and the first one seems to be connected to random worms but the only mention of this file is in the Hi-Jack This summary. NDNuninstall6_30.exe is the first file. Is there some easy way to get rid of this one? or is it even necessary to delete? Several forums I have seen all say don't run Hi-Jack This unless you really have a problem and know what you are doing. Well, I don't have a problem exactly... yet.

    The second file is osmim.dll. Which, when I looked that one up... has a very complicated method of removal... and I'm not sure if it was just the way that guy wrote the procedure... or if my computer just didn't feel like acting like he said it would. But needless to say, I didn't get rid of it.

    Anyway, any help would be appreciated. :D
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    osmim.dll is part of Marketscore Internet Accelerator. Sometimes it is just causing problems to your Internet connection's LSP chain (the O10 line in HJT will report this). Easily fixed with LSP-fix

    NDNuninstall6_30.exe - this is New Dot Net and if you have this you probably have other problems. You should follow standard cleaning procedures give below.

    Please follow the steps below:

    Note: Make sure you fix the Spybot Ignor Product bug as indicated in the READ ME!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. Thadian

    Thadian Private E-2

    Did exactly as instructed and it looks like both files are gone. It was Spybot that got them... which is weird cause I regularly run Spybot, Adaware, and my Norton. perhaps one of the early steps that i didn't used to do helped out.

    Anyhow... Thanks for the advice! :D
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your welcome!

    FIxing the Spybot Ignore Product bug is what allowed it to detect NewDotNet.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds