Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Hi,
I have a very annoying problem and I need urgent help. I have Windows XP Proffesional and recently Norton Anti-virus has reported I have a trojan virus called Keylogger. Naturally my first thought was to delete the root file, so I tried it but Windows keeps reporting that access is denied. I am the administrator so I don't understand why I don't have all file priveleges. I did mess around with the file types/folder options in the control panel, to no avail.
If it helps, this is the exact directory:C:\WINDOWS\msin32.dll
Is this .dll file necessary? Is it just corrupted by the virus?
Please help!
Thank you...
i just got rid of the same virus but now i have a different problem. norton says to delete the file, you need to go into safe mode and delete it from there. thats what i did. but now i have the error message at the beginning of start up saying that msin32.dll is missing. now i need to figure out how to get rid of the error messaage.
0 
EXACTLY!I just did the same thing. The program that uses that must be for the hacker but I dont know how to get rid of it.
Someone help us!
0
Click Start, and then click Run. (The Run dialog box appears.)
Type regeditThen click OK. (The Registry Editor opens.)
Navigate to the key:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the following value:
anything related to msin32.dllyou could also try the free trial of, trojan remover from
www.simplysup.com
and you could also try the free trial of
PC Doctor to fix registry entries,and other leftovers from the trojan.
0
don't waste your time with pc doctor, they want $30 for a weeks use, registry mechanic has a free trial for 30 days.
http://www.sofotex.com/Registry-Mechanic-download_L10027.html
0
i tried to revise the registry through regedit, but i cant find anything that relates to the msin32.dll file. either that or i just dont know what is related to it. and i tried the registry mechanic, and that didnt work either. this is starting to get on my nerves!
baazar, let me know if you find a way out of this.
thanks for the help.
0
Yea, the exact same problem is happening to me, its not a probolem with the registry (its not even in it); this file is part of svchost, a program necessary to run windows but was taken advantage of by the hacker. So you can't delete svchost, but what we need to do is somehow edit it so it no longer needs the msin32.dll file.
I'm clueless on how do that. Fortunately this virus is not damaging in anyway after the msin32.dll file is gone, but still kind of annoying at start up. I'll let you know if I figure it out.
0
Go to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete the line with "svchost" in it.
the message will go away.
After deleting "msin32.dll", this run line requires this dll file to run. That is the reason for the error message, if you delete the line refering to it, it will not come up again and is not needed for Win XP to run.
0
good morning, I've got the same virus, keylogger.trojan msin32.dll
how did you finally get rid of it and not have any problems after wards ? thanks.
also, does this help get rid of all the pop ups ?
and, when I re-boot my computer, I get this searchv.com home page that comes up, not my msn homepage ?
0
I booted into "Safe Mode".
located the file "msin32.dll" in c:\windows\
must be an administratorthen go into regedit from Start-->Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete the line with "svchost" in it.
that should solve your problem, i have had no problems doing it this way
0
I booted into "Safe Mode".
located the file "msin32.dll" in c:\windows\
must be an administrator, delete this file.then go into regedit from Start-->Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
delete the line with "svchost" in it.
Reboot into Normal windows,
that should solve your problem, i have had no problems doing it this way
0
I, too, get the "file not found" message when I start up the computer after having removed the Keylogger.Trojan virus.
I understand the above post about what to do, except, the only thing I find that references "svchost" at
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run
is something called "Online Service" that is defined under the Data column as "C:\windows\svchost.exe".
Is this what I am to delete in order to prevent the "Can't find msin32.dll" message from popping up every time I turn on the computer?
Thanks
0
That was it! Thank you so much S!
For all ye who doth have this problem, either read the progress of this post, or do this:
Delete the file msin32.dll in the Windows Folder
Then go into the registry and go here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Run
And yes, delete it even if it says "Online Service." Because it's the hackers online service!
Everything will be cool from there, if you have problems you did something wrong so make sure to back up the registry and anything else you tamper with.
Good Luck
Thanks again S!
0
This is to ned:
I too had search v.
Its a virus and an evil one at that. Its trojan but you'll need special "unorthodox" tools to get rid of it. And fixing the msin32.dll file won't help pop-ups.But heres what you do about search v.
Download a program called hijackthis.
Then after you run and it cleans all trojan problems. Go into the registry and type:
find->searchv,search v, and all possible comibinations of search's and v's.
DON'T DELETE THESE STRINGS!
Just rename the pages listed to something random that isn't search v. I did google.Good luck. And remember to thank S!
0
One more thing, my post about fixing msin32. trojan, don't delete that folder in the registry, just delete the string that deals with msin32.dll.
0  |
 |
 |
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
