Have new virus

[Hanky]

Norton cant fix.
Is called:
msspi.DLL
Who can I trust to fix it?

[ValkyrieOfOdin]

No clue- i'll see if someone might know anything around here

[Buddha]

msspi.dll
Why do you think that is a virus? DLL files are normally system files so you want to keep them. I can tell you also that it is not a file in Windows 2000, 'cuz that is what I use. I just searched for it and it wasn't found.
It might be part of XP or Vista.
Go to Start and click on Search to look for it. If it is in your system files and you aren't having a problem I would leave well enough alone.

[dtown]

I'd start with running HijackThis and looking at the log, it sounds like CoolWebSearch. You can google parts of the log to see the solution or post it on the forum they have.

[Truckman]

It doesn't exist in my version of Vista...A quick Google search shows umpteen websites that will be glad to remove it (for a price, Ugarte, for a price)...That's as far as my limits can take you...Ben

[Hanky]

Originally Posted by Buddha

msspi.dll
Why do you think that is a virus? DLL files are normally system files so you want to keep them. I can tell you also that it is not a file in Windows 2000, 'cuz that is what I use. I just searched for it and it wasn't found.
It might be part of XP or Vista.
Go to Start and click on Search to look for it. If it is in your system files and you aren't having a problem I would leave well enough alone.

Can not invoke ctrl alt delete
do not have privilages (admin)
Should have said "malware" not virus
http://www.google.com/search?hl=en&s...ip.dll&spell=1

[Buddha]

I went to the AVG web site. They make a very respected anti-virus program which I use instead of Nortons. I went to the page below and searched their virus database with no results for msspi.dll or coolwebsearch.
I wouldn't delete anything at this point.
Actually, what I would do is to use a different anti-virus and see what happens. Give AVG Free a try, or Kaspersky's. Both are free.
I'm not sure why you can't do cntrl-alt-delete, or why you aren't an admin. You should be, but both programs above are good ones.
Let us know.


http://free.avg.com/ww.virbase

[LanceHaynie]

Originally Posted by Hanky

Can not invoke ctrl alt delete
do not have privilages (admin)
Should have said "malware" not virus
http://www.google.com/search?hl=en&s...ip.dll&spell=1

What I generally do to remove malware like this is login to windows in safe mode. To do this restart your computer and right before window loads (after BIOS and fun stuff about what computer you have) hit F8. I generally will hit it a couple times to make sure.

Once in safe mode I do two things, but this is ONLY once you are 100% certain you know the file is malware and not something essential to your PC.

First I do a general search for the file and delete every instance of it, second I get into the windows registry editor, you can get there in 98,xp,2000 by hitting start run, then typing "regedit" and do a search for the file, delete the records. If your in vista just type it in the search bar and hit enter on the start menu and it will run.

Like I said, only do this if you are sure its malware, if you have any questions let me know. I hope that helps.

[dtown]

You can try this, but I'd still go with HijackThis first as you've probably got some other friends lurking.

http://us.trendmicro.com/us/products...al/CWShredder/

[daveb]

Yeah CWS and its varients are a pain and you have to remove it very systemmatically to get it done right ... usually takes about 45 mins and requires hacking around in the registry.

If you are not comfortable doing that ... I would suggest paying someone to do it for you

[Hanky]

Ok clean, Thank you for taking the time to read this and offer help.
I went to ITX.com and paid them $59 to remotely take over and clean up.
I was simply out of my league on this one, also had them remove Norton.

[Howard Barlow]

Doesn't come up in a search of Kaspersky's Knowledge Base.

[JamesB]

I wish I would have seen this post earlier.

you should have tried this forum for help

http://icrontic.com/forum/index.php?

the best free help you will get.

this is the spyware and virus removal section

http://icrontic.com/forum/forumdisplay.php?f=57

James

[Hanky]

Originally Posted by Howard Barlow

Doesn't come up in a search of Kaspersky's Knowledge Base.

LOL, I deserved it I clicked on myspace friend request or as they say
"stupid is as stupid does".
It is brand new variant of malware, I am so relieved to see it gone because I would have lost many pictures and the hours it took to get them.

[Hanky]

Originally Posted by JamesB

I wish I would have seen this post earlier.

you should have tried this forum for help

http://icrontic.com/forum/index.php?

the best free help you will get.

this is the spyware and virus removal section

http://icrontic.com/forum/forumdisplay.php?f=57

James

I'm going to bookmark that, Thank you.