Hijacker Virus MS0B920B.DLL

I have been going through a nightmare. My homepage (yahoo), everything associated with my home page, and search page keep getting hijacked to a multitude of seach pages. I ran a McAfee scan and narrowed it down to the following file: MS0B920B.DLL. McAfee cannot delete or clean the virus. I went into my SYSTEM 32 files and located the MS0B920B.DLL file. I tried deleting the file and it won't allow me to do so. How can I overide the system and delete this file to get rid of my problem. I run Windows XP. Please help. Thank you!

 

Hi Covelli,

Generally, it is a good idea to start with the Cleanup Tutorial HERE:

READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

There are only a few of us Volunteers who regularly offer advice in this forum. Running through the above Tutorial will remove a lot of stuff that would otherwise clog a HijackThis Log and save us valuable time.

Please let us know the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF (if you have it) and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

Post back and let us know how you fared. Also, send us a HijackThis Log. Please be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!
Should you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

I’ve been tied up with work lately and cannot visit this forum too often these days, but somebody will try to take a look when they get a chance.

Best luck
PP

 

Since I finally figured out which file was the culprit (MS0B920B.DLL) my story has a happy ending. I went into safe mode and logged on as the administrator. I was then able to delete the MS0B920B.DLL file. I got rid of all of my temp files and restarted and almost everything was fine. I get a few error messages when I start up because the start menu is looking for the deleted MS0B920B.DLL file. I click ok and they go away and my system operates normally. I just need to figure out how to remove the prompts from the start menu. ???

 

Go ahead and scan with HijackThis and attach the log as per the instructions in my last post and we'll see what we can do!

PP