Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Explorer.dll


  • Please log in to reply
14 replies to this topic

#1 p3rs0c0m

p3rs0c0m

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 01:25 PM

I ran a virus scan and it found it and said it couldn't delete it. I went to the place where the file was and tried to manually delete it but even then it says I have no access to it. Is there a way to get rid of it?

BC AdBot (Login to Remove)

 


m

#2 Matt169

Matt169

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:11:45 PM

Posted 29 April 2006 - 01:45 PM

What virus software are you using?

you may wish to try starting in safe mode and locating the file as you said you did before.

Click Here to see the tutorial about safe mode

If it doesnt work come back and we will try see what else we can do :0

#3 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:11 PM

What virus software are you using?

you may wish to try starting in safe mode and locating the file as you said you did before.

Click Here to see the tutorial about safe mode

If it doesnt work come back and we will try see what else we can do :0

I used Norton cause that is all I have. I tried going to safe mode and delete it but it still said the same thing.

#4 ThorXP

ThorXP

  • Banned
  • 880 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:15 PM

What was the virus name and we need the right name for it? Also some system specs if you could please like processor, Ram, etc might help also. How long have you had the Norton? Is your subscription still good or is it expired?

#5 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:21 PM

What was the virus name and we need the right name for it? Also some system specs if you could please like processor, Ram, etc might help also. How long have you had the Norton? Is your subscription still good or is it expired?

The subsctiption is still good.
Norton call the thing Hacktool.SCKeyLogger
IT is Windows XP Home.
Celeron CPU 2.40GHz 2.39GHZ, 256 Ram, and 70MB Hard drive

Sorry If I missed somethings. I am not that computer smart.

#6 Matt169

Matt169

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:11:45 PM

Posted 29 April 2006 - 02:24 PM

you may wish to see this page

http://www.symantec.com/avcenter/venc/data...ckeylogger.html

to quote from the page

1. Update the virus definitions.
2. Run a full system scan and write down the filenames detected as Hacktool.SCKeyLogger.
3. Do one of the following:
* Windows 95/98/Me: Restart the computer in Safe mode.
* Windows NT/2000/XP: End the hacktool process.
4. Delete the value that was added to the registry.
5. Run a full system scan and delete all the files detected as Hacktool.SCKeyLogger.


and then if that went straight over your head and it seems like you have tried those you may wish to look towards this post ...

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Edited by Matt169, 29 April 2006 - 02:35 PM.


#7 ThorXP

ThorXP

  • Banned
  • 880 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:31 PM

Here is the page from Symantec on this virus and it is a dangerous one it is a key logger that keeps track of every keystroke you do.

http://www.symantec.com/avcenter/venc/data...ckeylogger.html

Question I have is how long is it since you last scanned your system with Norton? Actually how long is it since you updated the anti-virus files?

No matter I have a task for you and please follow it exactly and this is free and takes a while to get an answer so be patient and do not start another post on this problem until they get back to you.

Please read this guide before actually doing the procedure
And it has all of the links for downloads you need.

Preparation Guide for use before posting a HijackThis Log
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Go to the following to post your log file and it will be analyzed by a qualified tech

HijackThis Logs and Analysis
http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

#8 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:41 PM

Here is the page from Symantec on this virus and it is a dangerous one it is a key logger that keeps track of every keystroke you do.

http://www.symantec.com/avcenter/venc/data...ckeylogger.html

Question I have is how long is it since you last scanned your system with Norton? Actually how long is it since you updated the anti-virus files?

No matter I have a task for you and please follow it exactly and this is free and takes a while to get an answer so be patient and do not start another post on this problem until they get back to you.

Please read this guide before actually doing the procedure
And it has all of the links for downloads you need.

Preparation Guide for use before posting a HijackThis Log
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Go to the following to post your log file and it will be analyzed by a qualified tech

HijackThis Logs and Analysis
http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/

The virus definitions are already updated. They pointed the file out but couldn't get rid of it.. Last time I scanned was about 5 hours ago. And before that, last saturday.

#9 Matt169

Matt169

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:11:45 PM

Posted 29 April 2006 - 02:43 PM

If you look towards this prep post you will be able to fix this nasty thing


http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

:thumbsup:

#10 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 02:44 PM

Thank you for your help. I will try these things and see how things work out.

#11 Matt169

Matt169

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:11:45 PM

Posted 29 April 2006 - 02:45 PM

You are very much welcome :thumbsup:

I am sure the expert staff will be able to assist you further

#12 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 04:01 PM

I tried doing the thing it said on the Norton Site. But when it said to "Delete the value from the registry" I went to the place it said to go to but it didn't exist. It said:
# Click Start, and then click Run. (The Run dialog box appears.)
# Type regedit, and then click OK. (The Registry Editor opens.)
# Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

# In the right pane, find the entry that corresponds to one of the filenames written down in step 2, and then delete it.

The key part went as far as current version and didn't have the next part. Not as a file or folder.


Is it possible that it was installed on another user account that I have no access to and that is why I can't touch it?

#13 Matt169

Matt169

  • Members
  • 170 posts
  • OFFLINE
  •  
  • Local time:11:45 PM

Posted 29 April 2006 - 04:07 PM

hmm have you posted a hijack this log?

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

#14 p3rs0c0m

p3rs0c0m
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:06:45 PM

Posted 29 April 2006 - 04:10 PM

hmm have you posted a hijack this log?

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

It seems to take a while to do it so I have not done it yet. Use it as a last resort. See what I can figure out on my won for now.

#15 KoanYorel

KoanYorel

    Bleepin' Conundrum


  • Staff Emeritus
  • 19,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:65 miles due East of the "Logic Free Zone", in Md, USA
  • Local time:06:45 PM

Posted 29 April 2006 - 04:21 PM

p3rs0c0m,

You've been given proper directions to help fix your problem.
If you choose not to follow such, that's on you.
But you'll not be wasting others time any longer in this thread.

Good luck working it out on your own.
The only easy day was yesterday.

...some do, some don't; some will, some won't (WR)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users