Re: Adware virus with msg118.dll and msguard.dll

From: Mike Burgess (winhelp2002_at_spamthis.com)
Date: 02/21/04

  • Next message: Phil Weldon: "Re: Swen in email headers?"
    Date: Fri, 20 Feb 2004 18:20:19 -0500
    
    

    Su,
    > I use fixmsg117.exe under safe mode"
    Yup ..... that's what I meant before about requires special tools.
    Glad to see you have things resolved .......
    ____________________________________________________________
    Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
    Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
    http://www.mvps.org/winhelp2002/hosts.htm [updated 02-18-04]
    Please post replies to this Newsgroup, email address is invalid

    --
    "Su" <suc@citiz.net> wrote in message
    news:u3KawU99DHA.3792@TK2MSFTNGP09.phx.gbl...
    > Fortunately, I fixed the problem.
    >
    > I use fixmsg117.exe under safe mode set by msconfig /safemode Minimal and
    > then delete the keys in registry. It works.
    >
    >
    > "Mike Burgess" <winhelp2002@spamthis.com> wrote in message
    > news:OwOxYT69DHA.1116@TK2MSFTNGP09.phx.gbl...
    > > Su,
    > > SpyBot Support Forum:
    > > http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi
    > > ____________________________________________________________
    > > Mike Burgess  [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
    > > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS
    file
    > > http://www.mvps.org/winhelp2002/hosts.htm [updated 02-18-04]
    > > Please post replies to this Newsgroup, email address is invalid
    > > --
    > >
    > > "Su" <suc@citiz.net> wrote in message
    > > news:etn$pU59DHA.3436@tk2msftngp13.phx.gbl...
    > > > I find that the msguard.dll is used even if started in safe mode with
    > > > prompt. Can anybody tell me how to stop a DLL?
    > > >
    > > >
    > > > "Tom R." <tom42344@snotmail.com> wrote in message
    > > > news:O87tyVq9DHA.1424@TK2MSFTNGP12.phx.gbl...
    > > > > Su,
    > > > > Here is a Link to "HiJack This", run it and post the log
    > > > > file and someone will tell you what to remove.
    > > > >   http://www.majorgeeks.com/download3155.html
    > > > >
    > > > > "Su" <suc@citiz.net> wrote in message
    > > > > news:%239rznNo9DHA.2696@TK2MSFTNGP10.phx.gbl...
    > > > > > And SpyBot doesn't remove the msg118.dll and msguard.dll.
    > > > > >
    > > > > > What should I do next?
    > > > > >
    > > > > > "Mike Burgess" <winhelp2002@spamthis.com> wrote in message
    > > > > > news:e5E45qm9DHA.452@TK2MSFTNGP11.phx.gbl...
    > > > > > > Su,
    > > > > > > msg118.dll = Look2Me (requires special attention)
    > > > > > >
    > > > > > > After you run Ad-Aware\SpyBot, you will need to post
    > > > > > > a HijackThis log to one of the Forums listed below:
    > > > > > >
    > > > > > > Dealing with Unwanted Malware, Parasites, Toolbars and Search
    > > Engines
    > > > > > > http://mvps.org/winhelp2002/unwanted.htm
    > > > > > > ____________________________________________________________
    > > > > > > Mike Burgess  [MVP Windows Shell\User]
    > > > http://www.mvps.org/winhelp2002/
    > > > > > > Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a
    > > HOSTS
    > > > > file
    > > > > > > http://www.mvps.org/winhelp2002/hosts.htm [updated 02-18-04]
    > > > > > > Please post replies to this Newsgroup, email address is invalid
    > > > > > > --
    > > > > > >
    > > > > > > "Su" <suc@citiz.net> wrote in message
    > > > > > > news:e1ZytYk9DHA.1592@TK2MSFTNGP10.phx.gbl...
    > > > > > > > I've got the adware virus. I want to remove msg118.dll and
    > > > msguard.dll
    > > > > > in
    > > > > > > > windows\system32 folder but failed. I start up in safe mode
    but
    > > > these
    > > > > > two
    > > > > > > > files can't be renamed and removed.
    > > > > > > >
    > > > > > > > Can anybody help?
    > > > > > > >
    > > > > > > >
    > > > > > >
    > > > > > >
    > > > > >
    > > > > >
    > > > >
    > > > >
    > > >
    > > >
    > >
    > >
    >
    >
    

  • Next message: Phil Weldon: "Re: Swen in email headers?"

    Relevant Pages

    • RE: Unwanted Pages and Favourites
      ... Could you open your HOSTS File and see if there is any reference for any ... "nass" wrote: ... Yes you should Scan in safe Mode to be in the safe side. ... About how it get to your Computer you may be allowed a bad site to download ...
      (microsoft.public.windows.inetexplorer.ie6.browser)
    • Re: Hosts file/NAV cannot repair
      ... I am now receiving, both in Safe Mode and regular, a low memory ... windows is changing page faults. ... >> attempted to edit the hosts file, ... > scan with HijackThis. ...
      (microsoft.public.security)
    • Re: IE6 Failures
      ... It's HOSTS, ... Did you use any spyware programs to remove spy|ad|malware? ... download and run CWShredder in Safe Mode: ... Next, run AdAware, then Spybot, both from Safe Mode, also. ...
      (microsoft.public.windowsupdate)
    • Re: Hosts file - recreate itself?
      ... I renamed or rather changed the file back to its own original name, HOSTS ... there is no foreign entry in the file. ... The HOSTS file is not protected by Windows File Protection. ... You might want to start in Safe Mode to run your antivirus and anti-spyware ...
      (microsoft.public.windowsxp.general)
    • Re: windows wont boot
      ... > i recently bought a new motherboard and when my computer turns on it used ... > invalid boot.ini ... > booting from C:\ ... > now all it does is ask if i want to start windows in safe mode, ...
      (microsoft.public.windowsxp.hardware)

  • Quantcast