write-protected spyware?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by ramshead, Jan 6, 2005.

  1. ramshead

    ramshead Private E-2

    I am on a computer right now that has spyware/malware or something on it. When I open internet explorer, it automatically goes to a page I don't want it to, and if I type in one site, it'll go to another.
    I've turned off system restore; cleaned out cookies and temps; ran Nortons, Ad-aware (in normal and safe), Spybot (normal/safe), and everything else I'm suppose to; ran hijack-this (4 times), and physically gone (in safe mode) and tried to delete these .dll files. But one of them is Write-protected and I can't delete it! The rest just keep coming back. They are in the system32 folder.
    These are the 3 that wont delete (I deleted about 10 others)

    w8c654~1.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll
    2cid1n16yewonthd.exe
    3dfgrpcthe2j2711.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll.dll (this is the one that is write-protected).

    They all say the company is Melkosoft.

    Oh ya, when I ran hijack this there was a o2: BHO that I would delete...then run hijack again..and it would be back.
     
  2. Kodo

    Kodo SNATCHSQUATCH

    Please follow all the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal


    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.
     
  3. ramshead

    ramshead Private E-2

    did. Adaware and Spybot didn't pick any of those three mentioned above; I could not get to the sites for Bitdefender, RavAntivirus, TonyK's list and Pacmans startup list (instead this page with an address ending in .dll shows), and I don't remember what the other programs resulted in (I'm not at that computer now)...so I guess I can't post the other results until tomorrow :(
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds