Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!
Member
Member 1K
Member
Member
Founder Geek
Member
- i pwn n00bs -
Member
Member 1K
Member
Founder Geek
I Just noticed this earlier post. Yup, that's the problem.The Ad-Aware product did say it could not delete this file:
C:\Windows\system32\6qo4svc.cpy.dll
Is that part of the problem?
Member
Member
Founder Geek
It depends on your system, if you can enter the XP setup mode with out running the full system restore you should be able to. Recovery Console is the closest thing there is to DOS available in XP, it allows command line modifications.Before I do that I think my setup files are on a partitioned drive, is there a way to do what you are asking using that and if so how because the Recovery Console makes it sound like it will reinstall Windows in its entirety causing possible file and application loss.
This is a nasty pest. There's another solution that kills the DLL's and then fix the registry entries, however the recovery console method is easier. Here's the alternative method (put on your geek glassesLastly, why isn't there some way on this computer to delete any file I want or kill the process that owns that suspect file?
):Steps to take:
You will need KillBox ver.2.00.0179, so download that and keep it handy, we will need it to remove the Look2Me files.(unzip the files to your Desktop)
1.) From Control Panel>>Administrative Tools>>Local Security Policy & Under Local Profiles>>User Rights Assignment...and on the right side look for Debug Programs>>Right Click>>Select Properties.
2.)Click Add User or Group and when the next Window opens, click the Object Types button, and now put a Check in the box for Groups. click OK
3.)That Window will close, and the one you are left with click Advanced and from the next Window Find Now
*Look under Name(RDN) for Administrators and select it & Click OK.
4.)Administrators should show up in the box beside "Check Names" just Click OK, then that Window will close..and the next Window under the only Tab "Local Security Setting" should have Administrators listed in it, if it does Click Apply then OK again.
A Screenshot of what you should have.
and
Screenshot of what an infected system looks like.
With a reboot that fixes that.
*Make sure you reboot!
After rebooting...
Close all open Windows, open KillBox and under Fix L2M>>Kill VX2.BetterInternet.
As before your Computer will Shut down..
On rebooting, the 2 files will be deleted.
*The Problem
Because we accessed these .dll files, they will have corrupted the User Rights Assignment again , but no big deal.
Repeat the Process of Adding the Administrators Group to the Debug Programs again, and since the offending files are gone, this time those settings will stay put.
Things to do with Killbox after removing these files:
1.)Click Find>>Find VX2.BetterInternet
*Nothing Should show up in the next window, if it does you are infected still. But if Clean then...
2.)Click Find>>User Agent String, click on the CLSID key, and under Action>>Delete User Agent String
3.)Click Fix L2M>>Import L2M.reg to remove various registry keys set by the software.
Run Ad-aware using an Updated reference file to remove anything else I missed.
0 members, 0 guests, 0 anonymous users
Community Forum Software by IP.Board
Licensed to: Geeks to Go, Inc.
Sign In
Create Account
