Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

MY reports. need help

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: MY reports. need help

Unread postby cbrennan728 » March 30th, 2009, 12:09 pm

ok, the scan is running and I went ahead and did the same search again and this time right clicked it AND the location of the file is in the windows folder under system 32 folder....but it is there....
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am
Advertisement
Register to Remove

Re: MY reports. need help

Unread postby Shaba » March 30th, 2009, 12:35 pm

OK, let scan finish and post back log then :)
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 30th, 2009, 2:37 pm

KASPERSKY ONLINE SCANNER 7 REPORT
Monday, March 30, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Monday, March 30, 2009 14:35:03
Records in database: 1986635
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
Z:\

Scan statistics:
Files scanned: 178925
Threat name: 4
Infected objects: 4
Suspicious objects: 0
Duration of the scan: 02:57:11


File name / Threat name / Threats count
iexplore.exe\MSIMG32.dll/iexplore.exe\MSIMG32.dll Infected: not-a-virus:WebToolbar.Win32.MyWebSearch.cv 1
C:\_OTMoveIt\MovedFiles\03272009_093018\PROGRA~1\MyWebSearch\bar\1.bin\F3WPHOOK.DLL Infected: not-a-virus:WebToolbar.Win32.MyWebSearch 1
C:\_OTMoveIt\MovedFiles\03272009_093018\PROGRA~1\MyWebSearch\bar\1.bin\M3IDLE.DLL Infected: not-a-virus:WebToolbar.Win32.MyWebSearch.ax 1
C:\_OTMoveIt\MovedFiles\03272009_093018\PROGRA~1\MyWebSearch\bar\1.bin\M3SLSRCH.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.cl 1

The selected area was scanned.
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 30th, 2009, 2:56 pm

Delete that file and empty this folder:

C:\_OTMoveIt\MovedFiles

Empty Recycle Bin.

Still problems?
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 30th, 2009, 3:11 pm

Idid the move it folder no problem....but it will not let me delete the msimg one... it tells me I need permision....unless you are talking about delelting the whole system 32 folder
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 30th, 2009, 3:22 pm

Please close messenger if open and try again.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 30th, 2009, 3:42 pm

nope it keeps telling me I need permission to delete and on the top of the box it says destination access to folder denied
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 31st, 2009, 12:03 am

Then please try to close all browser windows as well and try again.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 31st, 2009, 9:03 am

I have tried it all it will not let me
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 31st, 2009, 9:52 am

Please try then in safe mode.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 31st, 2009, 10:11 am

how do you put the computer in safe mode? I did it years ago but cannot remember
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 31st, 2009, 10:19 am

This should help here.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 31st, 2009, 12:42 pm

no it still wouldn't let me ...i am typing the exact thing the box says when it comes up:

Destination access folder denied
you need permission to perform this action
GDIEXT client dll
file version 6.0.6000.16386

Try again

so when I hit try again nothing happens and it keeps popping up with this box
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am

Re: MY reports. need help

Unread postby Shaba » March 31st, 2009, 12:59 pm

So let's use then otmoveit3 again:

  • Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    Code: Select all
    :files
    C:\Windows\system32\MSIMG32.dll
    
    :commands
    [EmptyTemp]
    [reboot]
    

  • Return to OTMoveIt3, right click in the "Paste List of Files/Folders to Move" window (under the yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt3
Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
User avatar
Shaba
Admin/Teacher Emeritus
 
Posts: 26974
Joined: March 24th, 2006, 4:42 am
Location: Finland

Re: MY reports. need help

Unread postby cbrennan728 » March 31st, 2009, 2:00 pm

Files moved on Reboot...
DllUnregisterServer procedure not found in C:\Windows\system32\msimg32.dll
C:\Windows\system32\msimg32.dll NOT unregistered.
File move failed. C:\Windows\system32\msimg32.dll scheduled to be moved on reboot.
cbrennan728
Regular Member
 
Posts: 41
Joined: March 16th, 2009, 9:59 am
Advertisement
Register to Remove

PreviousNext

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 351 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware