User User name Password  
   
Saturday 6.9.2025 / 05:43
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > bad dll attacking
Show topics
 
Forums
Forums
Bad DLL attacking
  Jump to:
 
Posted Message
Bixxel
Junior Member
_
15. July 2007 @ 12:58 _ Link to this message    Send private message to this user   
There is an enemy by the name msacmx.dll in my computer. No spyware or malware programs can take it away. Not Avast either. I have found couple of advices in internet how to remove this object but I don't understand them at all. My home language is finnish. It's difficult for me to follow explaining in english. Is there anybody who can explain me in a simple and understandable way how to remove this dll away from my computer. Thank you for help.
Advertisement
_
__
Member
_
15. July 2007 @ 16:13 _ Link to this message    Send private message to this user   
Simply look for msacmx.dll in C:\WINDOWS\System32 folder & delete it.
windmaker
Newbie
_
15. July 2007 @ 16:19 _ Link to this message    Send private message to this user   
Its CWS AVG Anti spyware should get rid of it
Download AVG Anti-Spyware from [url=http://downloads.grisoft.cz/softw/70/filedir/inst/avgas-setup-7.5.0.50.exe][color=#3333FF]HERE[/color][/url] and save that file to your desktop.
[color=#33CC00]This is a 30 day trial of the program[/color][list=1]
[*]Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop and double-click it to launch the set up program.
[*]Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
[*]On the main screen select the icon "Update" then select the "Update now" link.[list]
[*]Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
[/list]
[*]Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
[*]Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
[*]Under "Reports"[list]
[*]Select "Automatically generate report after every scan"
[*]Un-Select "Only if threats were found"
[/list]
[/list]Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.[list=1]
[*]Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
[color=#FF0000]IMPORTANT:[/color] Do not open any other windows or programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
[*]Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
[*]Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
[*]AVG Anti-Spyware will now begin the scanning process, be patient this may take a little time.
Once the scan is complete do the following:
[*]If you have any infections you will prompted, then select "Apply all actions"
[*]Next select the "Reports" icon at the top.
[*]Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
[*]Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the results of the AVG Anti-Spyware report scan.
[/list]


you can't see me but sometimes can hear me
Bixxel
Junior Member
_
16. July 2007 @ 06:50 _ Link to this message    Send private message to this user   
Hy and thanks! I have tried AVG but it didn't help. Then I tried Advanced WindowsCare and it found them and here is the log it made:

msacmx.dll - CoolWebSearch, http://cwshredder.net/cwshredder/cwschronicles.html parasite variant
Infection key: HKEY_CLASSES_ROOT\CLSID\{A5366673-E8CA-11D3-9CD9-0090271D075B}

msacmx.dll - CoolWebSearch, http://cwshredder.net/cwshredder/cwschronicles.html parasite variant
Infection key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID+{A5366673-E8CA-11D3-9CD9-0090271D075B}
bluecoal
Suspended due to non-functional email address
_
16. July 2007 @ 07:00 _ Link to this message    Send private message to this user   
http://us.trendmicro.com/us/products/personal/CWShredder/

Here is a link for a tool to remove coolwebsearch. If that does not work, you can go to the finnish side of the forums. There is a forum like this in Finnish. (click the Home tab and then look all the way down at the bottom for International links and you will see the Finnish afterdawn.)

This message has been edited since posting. Last time this message was edited on 16. July 2007 @ 07:02

Bixxel
Junior Member
_
16. July 2007 @ 09:12 _ Link to this message    Send private message to this user   
Thank you friend. I have tried that tool, no help, and I'm now working with this problem at that finnish page. Thanks!
Advertisement
_
__
 
_
bluecoal
Suspended due to non-functional email address
_
19. July 2007 @ 06:30 _ Link to this message    Send private message to this user   
It looks like your helper in the other thread may not be able to reply for a little while.

Here are instructions for another tool you could try
Superantispyware
Steps 8 and 13.

http://www.malwarebytes.org/forums/index.php?showtopic=692

Also, when you are hunting for files, it sometimes helps to show hidden files and folders. Instructions on how to do that are here:

http://www.bleepingcomputer.com/tutorials/tutorial62.html
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > bad dll attacking
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork