[HaBo]

Help me hab mir das eingefangen ? MWSOEPLG.DLL <---Trojaner

kennt jemand schon ein anti Gen ?

und weiß jemand was draüber wie diese dateien ins system kommen können ohne download ?

http://www.derkeiler.com/Newsgroups/...4-01/1300.html

http://www.derkeiler.com/Newsgroups/...4-01/1257.html



Hab das Anti Gen Gefunden :

here is how you can remove it:

Close all your browsers, Outlook and MSN
Go to the directory: C:\Program Files\MyWebSearch\bar\1.bin (the default install directory)

Create a new text file
name the file as: uninstall.bat

open the uninstall.bat file and paste the following:

regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL" /s
regsvr32 -u "C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL" /s


save the uninstall.bat file
dblClick the uninstall.bat file - to run it
open your Browser ..... ooops no SmileyCentral ;-)

if it shows again when you restart your machin, it is just because there is a registry entry: HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run that you need to delete a key from.
search for the data starting with: "C:\Program Files\MyWebSearch\ and delete it

Enjoy,
Yu

Quelle :

http://www.spywareinfo.com/forums/in...howtopic=44755