Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Please! Dsginaloader?


  • Please log in to reply
1 reply to this topic

#1 HokutenDelita

HokutenDelita

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:48 PM

Posted 09 September 2006 - 09:36 PM

Alright, here's the deal. About a month ago, my little brother's friend was on my computer I guess looking at porn while I was gone. So when I got home my computer was swarmed with pop up ads.

So I had mass viruses, including things such as Surf Sidekick 3. So after like...two weeks of trying to get rid of the viruses. I finally got rid of a majority of the viruses, including ssk3. But some files couldnt be erased with several different virus/adware removal programs, so they ask if they can run on start up.

SO, semi-recently, theres been a login screen when i turn on my computer that asks for a password , but you can just click OK to go on through with it. But because of this login screen, the virus removal program doesnt run on start up. So I tried going to remove the login screen, but it says i cant because of a recent program-something-or-another was installed. The file name it gave me was "dsginaloader.dll"

Okay...so my first though was... =X it was some kind of porn virus. So ...we FINALLY deleted it (which probably was bad), and now i cant log on in normal mode OR safe mode with networking.

When the login screen is SUPPOSED to come up, it says the dsginaloader is gone and tells me to restart. so now the only way i can get on my computer is by going to normal safe mode (without networking).

So I tried looking for ginaloader...and apparently GINA is a part of the system? Now i dont know what to do.

Can someone please help?

BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:08:48 PM

Posted 09 September 2006 - 11:29 PM

Do you have the Windows XP installation disk?

OR

Do you know exactly when this problem began (downloaded the malware)?

If you do, try a Windows System Restore using a date from before the crap was downloaded or in worst case a date before you deleted the malware.

If the date predating the whole mess is available you should be able to load Windows properly and then run av and online anti-malware scans to make sure you're rid of the malware.

If the date is only from before you deleted the malware then the same thing applies - run your resident av scan and several on-line antimalware scans.

If that doesn't eliminate it run Spybot and Adaware from safe mode, (assuming that System Restore enables you to access safe mode again), and post an HJT log in our HJT forum for help.

If you do not already have these freeware aps installed on your computer, you can get them at the following sites:

*AdAware SE: http://www.majorgeeks.com/download506.html

*Spybot S&D: http://www.safer-networking.org/en/index.html

Following that that I suggest you post a “HijackThis” log for expert assistance with your malware infection.

Read the pinned post in our “HijackThis” forum,
here
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
Carefully read and follow all directions explicitly.

Following instructions create a HJT log, and POST THE HJT LOG YOU CREATED IN OUR HJT FORUM – not in this forum,
at this link.
http://www.bleepingcomputer.com/forums/posthjtlog.html
Include the specs for your computer (ie, processor, amount of RAM, brand or motherboard, etc, and briefly describe the problem you are experiencing.)

Unless you are expert at editing the registry, Do not use the Hijack This program to try to fix anything by yourself as even what may seem to be a small mistake can render your operating system inoperable.
Some files when in the correct folder for them may be fine while in another may be malware hiding.


A member of our expert HJT Team will analyze your log, make recommendations and offer assistance, walking you through the complete repair process.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you in order received as soon as possible.

NOTE
Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make your computer to be different than displayed in the log you posted and therefore make your log inaccurate).

The first criteria the HJT Team has when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having 1 reply.
A team member, looking for a new log that requires help might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, post your HJT Log in our HJT Forum (not here in this forum) and wait for a response from a HJT team member.

After you post your log, please do not make any changes to your computer. Discontinue trying to delete anything with any program as changes will make your HJT log obsolete and waste valuable time spent by our HJT experts analyzing the log made innacurate by changes and therefore their plan formulated to address the problems will also be obsolete.

Make sure you post the log in the HJT forum, not here or the response from our HJT Team will be delayed because the post will have to be moved before they see it and it will then fall behind many others posted that same day.

If after 5 days you still have gotten no response, then post a re-request and a link to your HJT log HERE.
http://www.bleepingcomputer.com/forums/topic14717.html

Edited by Enthusiast, 09 September 2006 - 11:36 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users