Delete that dll and that registry entry.
to delete the dll you may have to be in safe mode or use a windows cd and boot into that than delete it. The reason for that is that the file may be running or using another file that is running and it will not allow you to delete it while it is running. Booting into safe mode may stop it from running, booting from a cd WILL stop it from running.
To delete the file open up your command prompt:Start>run
in the prompt do thischange your directory
to the system 32 folder using the command:
- x = your drive you have windows installed on
Next you will get a list of the directory
using the command:dir /l /od
- /l and /od basically organize everything for you, in this case it will list them by date
You will than remove any attributes
given to that specific file using this command:attrib -a -s -h rewagiki.dll
- this allows you to view the file if it is hidden and other options.
Next you will delete
the file using the following command:
I would also like you to check your hidden files in system32. Just use the show hidden directory
You should than see ONLY files with .manifest at the end of them, if you see others that are not .manifest than delete them, UNLESS they are questionable, and by that I mean do they look like they are for your antivirus, or quickbooks, or something important, to find out, just post the file name here and I, or someone, will tell you.Remember to try this in safe mode first, if you cannot do it that way, than you can boot from a Windows XP CD and use the REPAIR CONSOLE to do the exact same thing from above. Keep in mind the Repair console and the windows repair are two different things. The repair console is an option you can choose right at the beginning of the boot of Windows XP CD.
Return to normal windows mode and run your antivirus and antispyware.
Edited by Box In A Bag, 25 November 2008 - 01:53 PM.