force a process to release a dll

[epots9]

i got one of those lovely spyware things where it says u have a virus download thie new software then it opens ie and says DOWNLOAD NOW!!!.

i have been able to track which dll file it uses (tntftqqf.dll), its in the system32 folder...and not even in safe mode will it let me delete, cuz its in use....

any suggestions on how i can delete the dll?

thank in advance.

[epots9]

so far, my 2 options are:

1 -> format
2 -> remove harddrive, plug it into another computer (slave), delete dll, and then plug it back in

:(

[bartonc]

so far, my 2 options are:

1 -> format
2 -> remove harddrive, plug it into another computer (slave), delete dll, and then plug it back in

:(

Perhaps

regsvr32 /u tntftqqf.dll

in the system32 directory, first???

[epots9]

Perhaps

regsvr32 /u tntftqqf.dll

in the system32 directory, first???

it says its successful but i still can't delete it cuz its in use :(

i'll try safe mode, i'll tell u how it goes

[epots9]

safe mode was a no go as well

[bartonc]

safe mode was a no go as well

Advanced WindowsCare Personal 100% Freeware is great at looking at startup issues.

[epots9]

bartonc thanks for all your help, but i'm just going to format (in the middle of it right now). I've been monitoring this dll and it makes the computer think that its iexplore.exe that is why my new 4 anti-virus programs don't detect it and why my dozen spyware programs don't detect it...oh well my computer is due for another cleaning anyways.

thanks again bartonc!

[Chizl]

As long as your the Administrator of the machine I have a solution that always works.. The best way to remove a virus type DLL, EXE or Program Folder is deny yourself access to it, then reboot. Then you can take ownership and delete it.

[bartonc]

As long as your the Administrator of the machine I have a solution that always works.. The best way to remove a virus type DLL, EXE or Program Folder is deny yourself access to it, then reboot. Then you can take ownership and delete it.

Thank you for that. Would you care to give details on denying access and taking ownership, for those of us who have no practice doing so?

[nandakumarr]

Thank you for that. Would you care to give details on denying access and taking ownership, for those of us who have no practice doing so?

Thanks a lot friends....It really worked for me. I faced trouble because of the dll named pmnkkjg. I never felt hard debugging when compare to this crap. At last ur clue helped to delete that guy from system32. It camofulaged itself as THotKey.exe and popups came whenever I invoked IE.

regarding steps to revoke permission, juz rt click and go to security and deny the permissions and also click on advanced button in the security screen itself and override the parent permission. Then reboot ur machine and get back ur permissions and delete it. thats it.

Thanks again guys. I would like to kill the bastards who are all writing these programs to hang others machine. Instead they can try something constructive.