Cheat Engine

giveme

i have this dll in my system32 thats a trojan and when i try to delete it , it wont let me it says its being used

Noz3001 · Posted: Sun Apr 20, 2008 3:10 pm Post subject:

Boot up in safe mode by pressin F8 before windows loads. Also get hijackthis! and remove any trace of it from there.

PS: I meant boot in safe mode and try to delete it.

giveme · Posted: Sun Apr 20, 2008 6:01 pm Post subject:

didnt work

Flyte · Posted: Sun Apr 20, 2008 6:18 pm Post subject:

What is the name of the .dll, and how do you know for a fact that it is indeed a trojan?

oib111 · Posted: Sun Apr 20, 2008 6:18 pm Post subject:

If it's in use open up your task manager (Ctrl+Alt+Del) and look at your process list. If you see any weird unknown processes being run and it says its being run by the user (you) right click it and end the process. If you don't see anything, dl a program that allows you to see hidden processes and kill it from you.

Noz3001 · Posted: Mon Apr 21, 2008 1:38 am Post subject:

get hijackthis and post the log.

Uber-1337 · Posted: Mon Apr 21, 2008 2:04 am Post subject:

if you know where the .dll is then download Unlocker and find the file right click and unlock it, then delete it.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

Use IceSword to kill the process or maybe a program named for delete on reboot.
Also if you know what trojan it is look up removal instructions on it.
Because possibly another application is checking to see if it is there and if you do remove it it will create it again. So you will not only have to remove it, but something else as well and registry keys along with that.

SFP+ · Posted: Thu Apr 24, 2008 1:45 pm Post subject:

Download Unlocker and force it to close all applciations using the .dll file + removing it.

Labyrnth · Moderator Reputation: 10 Joined: 28 Nov 2006 Posts: 6301

noz3001's method should have worked. Basically tells you they guy didnt know what to do but came back and said "nope didnt work"
OR the files is being re created by another process.

Psy · Posted: Thu Apr 24, 2008 2:22 pm Post subject:

The guy hasn't posted naf since the last "didn't work" post, so yeah no need to keep inputting into this thread people.
He had the chance to create and PM a HiJackThis log so someone more experienced could have a look for him....

Ubuntu · Cheater Reputation: 0 Joined: 20 Apr 2008 Posts: 45

Use Malwhere to see information about the process running and download unlocker.

aidens · Posted: Sun Apr 27, 2008 8:30 am Post subject:

C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\msiexec.exe
Hey, what processes are these? I saw them at the end of the process list before hijackthis.exe.

Thlump · Posted: Sun Apr 27, 2008 9:43 am Post subject:

Rundll32 is used to run DLLs obviously and maybe more.
msiexec is Windows Installer and is need to use .msi files. .msi files are install files

CZ3R0C · Posted: Mon Apr 28, 2008 11:48 am Post subject:

Windows key+R
(Opens Run)

type "msconfig" omit the quotations

click the "Startup" tab

post the list of what is in the box.