Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hello,
I've found a file that I believe is the cause of some pop up and slow XP start up problems I've been having.
It is called aad.dll. and it's in my system folder it makes a copy of itself as well. I can delete the copy but it just creates another one at restart. The original won't let me delete it because it says it's running or protected.
I tried starting in safe mode but I get the same error when I try to delete it.
I do get a "look2me" pop up window but I've run all of the current look2me kills so I can't figure out what is happening.
I've run "msconfig" to try and address the start up issues and there doesn't seem to be anything strange there.
Is aad.dll a new look2me? Can anyone help me get rid of it?
Please!!!

Longshot
If you have a mate to that aad.dll showing up as aad.cpy.dll...yes it is the new look2me trojan.
Check this page...:
http://www.computing.net/security/wwwboard/forum/11279.html
Response # 3
__________________________________I never give up!

Thanks for helping Blender.
It makes me feel a little better knowing I was on the right track.
Here is the issue: the fix seems rather complicated and I am kind of a novice.
I've only had this computer for a month. Do you think it would be easier just to Uninstall/Reinstall XP? Or would the problem still persist?
Thanks again.

LongShot
Sorry for taking so long...been quite buzy.
We now have a much easier fix to kill that trojan...I have tried it on my machine and it works good.
Download O^E.BetterInternet and follow these instructions.
1.)Close any open browser windows or programs you are using, since we will be shutting down the computer a couple of times.
2.) Start the OE2.BetterInternet.exe and click the Find VX2.BetterInternet button and wait a few seconds, you should see some info appear in the white textbox.
3.)Now Click the Fix button.. and your machine will automatically reboot.(Thats Step 1)
4.)When you restart and get back to your desktop, the OE2.BetterInternet program will start up again on it's own. As before click Find VX2.BetterInternet then click Fix, and the computer should restart again..(Thats Step 2)
5.)When it restarts this time the OE2.BetterInternet.exe will start itself one last time. This time Click Find VX2.BetterInternet button, you should notice that the section Files Found--- will be blank, indicating that they were deleted successfully.
Click the Fix button one more time and the program will cleanup and close.The trojan is gone but still some cleanup to do.
1. Download ad-aware from here:
Keeping the default options. However, you will need to change some of the settings before your first scan
2. Go to Start > Programs > Lavasoft and click on AdAware 6 to open the program
3. Look at the icons on the top right of the page and click on the ‘world’ and let AdAware update the spyware reference list
4. Once the update is finished click on the ‘Gear’ icon (second from the left) to access the preferences/settings window
5. In the ‘General’ window make sure the following are selected:
Automatically save log-file
Automatically quarantine objects prior to removal
Safe Mode (always request confirmation)
6. Click on the ‘Scanning’ button on the left and select :Scan Within Archives
Scan Active Processes
Scan Registry
Deep Scan Registry
Scan my IE favorites for banned URL’s
Scan my Hosts file
Under ‘Click here to select drives + folders’, choose:
All of your hard drives7. Click on the ‘Advanced’ button on the left and select:
Include additional process information
Include additional file information
Include environment information
Include additional object details8. Click the ‘Tweak’ button and select:
Under the ‘Scanning Engine’:
Unload recognized processes during scanning
Include basic Ad-aware settings in logfile
Include additional Ad-aware settings in logfile
Under the ‘Cleaning Engine’:
Let Windows remove files in use at next reboot9. Click on ‘Proceed’ to save the settings.
10. Click ‘Start’ and on the next screen choose ‘Activate in-depth Scan’ at the bottom of the page and then choose: Use Custom Scanning Options
11. Click ‘Next’ and AdAware will scan your hard drive(s) with the options you have selected.
12. Once done the scan click "next".13. In results window right click and choose "select all items"
14. Click next, then ok.
15. REBOOT to finish removing what it foundLet me know if you still have problems.
I never give up!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |