Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How To Remove "dlplugin"?


  • Please log in to reply
4 replies to this topic

#1 xaeroevo

xaeroevo

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:05:38 AM

Posted 29 August 2007 - 11:03 PM

i came across this site : www.file2you.net ..
awesome site, very good speed.. but the only problem.. they asked me to install a firefox plugin to download...
so i installed it.. but my AVG anitvirus and AVG spyware went nuts, so i removed them...
after removing them, i ran a scan.. nothing was on my system.. but i still get this :
Posted Image
how do i remove that? i read somewhere that i have to remove the registy entry.. so i downloaded RegSeeker..
and i got these values... :
Posted Image
... i still want to be able to download from that site... :thumbsup: i couldnt even contact the site admins -.-


Moved from the XP Form.~acklan~

Edited by acklan, 30 August 2007 - 01:19 PM.


BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • BC Advisor
  • 12,986 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:38 PM

Posted 30 August 2007 - 05:52 PM

dlplugin.exe is malware.
See post #52 thru #58 in the link below.
http://www.techsupportforum.com/security-c...-problem-3.html

You should scan your computer with the programs below. Please let us know the results.

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This Log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post a log in this forum. http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#3 xaeroevo

xaeroevo
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:05:38 AM

Posted 31 August 2007 - 03:55 AM

ok, when i first installed dlplugin, my antivirus and antispyware detected it so i removed dlplugin. but i stil have it installed on firefox coz i still wanna be able to download from file2you.net..
i refered to the sites you gave me and this is what i did :
i installed the apps, updated them to the latest (in normal mode)
then i rebooted in safe mode..
i plugged out my lan cable..
i first ran super anti-spyware,
then i ran Ad-aware.
then i ran spybot
then i ran AVG antispyware
then i ran AVG antivirus..
they all detected nothing..
i ran a Full scan in all of them..
that means i'm safe right?
at this point in time i still have the dlplugin extension on firefox,
its not really causing any problems except for the annoying error pop-up msg above ^^
so i need to know am i safe up to this point?

#4 buddy215

buddy215

  • BC Advisor
  • 12,986 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:04:38 PM

Posted 31 August 2007 - 04:25 AM

If you do a Google search for "dlplugin.exe" you will see it is malware. Below is info from another site.
http://forum.cartoon-world.org/viewtopic.p...986278448fbdfb5
1. Information
Virus Name: Backdoor.Nucledor.11.a
Program Name: dlplugin.exe
Folder Location: C:\Documents and Settings\*Your Name*\Application Data\Mozilla\Firefox\Profiles\ye7zkp3u.default\extensions\(c17127b0-af04-11db-abbd-0800200c9a66}\

2. Goto this location C:\Documents and Settings\*Your Name*\Application Data\Mozilla\Firefox\Profiles\ye7zkp3u.default\extensions\

My first post had info on how to remove dlplugin.exe from Firefox.

You can also submit the file to Jotti and see what other antiviruses find.
http://virusscan.jotti.org/

Edited by buddy215, 31 August 2007 - 05:02 AM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss

A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”


#5 xaeroevo

xaeroevo
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:05:38 AM

Posted 31 August 2007 - 06:49 AM

bah! to hell with that file host service! i'll just shred the damn extension folder.. thanks for the info guys, and the multi-antivirus site! :D




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users