dl.exe (i think)

Discussion in 'Malware Help (A Specialist Will Reply)' started by Jewelie, Jan 18, 2006.

  1. Jewelie

    Jewelie Private E-2

    Hello All,

    I'm pretty sure I have the dl.exe virus/worm/trojan (not sure what to call it) but it's been pretty nasty to me.

    I'm using my laptop as I am no longer able to go anywhere on my desktop computer. When I try to open IE, it gives me "the page cannot be displayed" or sometimes just a white blank page.

    I have run spybot and ad-aware, but they are not finding anything. I have transferred a HJT log via cd so that I can at least post that here. ( Is it OK to post it now? )

    I'm not a beginner with spyware, as my hubby seems to get alot of nasty bugs on the computer, but I am just at a loss with this one.

    I can't download any programs at this point and have no way to transfer to my other computer.

    Can anyone help me manually delete this ?


    Any help is greatly appreciated. Thanks in advance. :)
     
  2. Jewelie

    Jewelie Private E-2

    Hello again, yes I have followed instructions as best as I can. I have ran, adaware, spybot, and cwsShredder. spybot and adaware found nothing, and cws found the look2me (which i fixed) The other programs I don't have and can't get because I can't access the internet. Which also means I can't run the online scanners.

    I don't see anything in the HJT log, but I could be wrong.

    Attached is my log.


    Thanks for your help.
     

    Attached Files:

  3. Jewelie

    Jewelie Private E-2

    i tried to run spysweeper, but was unable due to the fact that i had downloaded it a while back and the trial is now expired. So, that's no good. :(

    No, we don't use Treewalk, but we do have some kind of DNS thing on there. Sorry, I'm not so good at computer lingo.

    Also, we did the Start>Run as you mentioned, but the CWShredder Service was not listed. At the moment, we are running ewido scan, hopefully that can help.

    And, no... I can't find the dl.exe file anywhere, but i have a command prompt box that keeps popping open and the top left corner says dl.exe, and then an error box will open saying the app failed to initialize properly (0x0000005) Click on OK to terminate.
    Also have noticed that once a program is closed, it seems to stay open in my processes.

    Sounds fun eh? =O)
     
  4. Jewelie

    Jewelie Private E-2

    Ok, after a few hours of running, ewido finally finished. It found quite a bit that the others didn't find. :)

    Scan report and HJT log attached.
     

    Attached Files:

  5. Jewelie

    Jewelie Private E-2

    Sorry, I left for work right after I made that post this morning. I'll get those downloaded, ran and logs posted for you soon. Thanks so much for your help :)
     
  6. Jewelie

    Jewelie Private E-2

    Whew... finally done with those. WinPfind took forever.

    Logs are attached:
     

    Attached Files:

  7. Jewelie

    Jewelie Private E-2

    no i dont know what they are...
     
  8. Jewelie

    Jewelie Private E-2

    the bug beat us... we gave in and just reformatted. We couldn't get much of anything to run anymore, and we couldn't stay connected to the internet long enough to get any files onto the computer.

    Thank you for all of your help, we really appreciate it. :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds