What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Help On My Hijackthis Log

25 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #46
Are you getting any messages from killbox?

Try running Killbox in safe mode to see if it has better results.

After reboot, run the Findfile.bat again and post the results.
Post #47
Volume in drive C has no label. Volume Serial Number is 78EC-98C7 Directory of C:\Windows\System32 01/06/2005 11:16 PM 57,344 sqlneee.dll 1 File(s) 57,344 bytes Directory of C:\Documents and Settings\Owner\Desktop No messages from Killbox when I run it. I just cut and paste the file name and selected delete on reboot. When the system reboots there still is no file in the submit folder.
Post #48
I am at a loss as to why killbox will not kill that file. If you can see the file follow the instructions below so one of the experts can have a look at it.

Please locate the following file. Right click on it and choose send to < Compressed (zipped) Folder. Please email the zipped folder to here so it can be examined and sent to the proper people. Be sure to include a link to this thread in the email.

C:\Windows\System32\sqlneee.dll


You may need to set your computer to show all files.
  • Double-click My Computer.
  • Click the Tools menu, and then click Folder Options.
  • Click the View tab.
  • Clear "Hide file extensions for known file types."
  • Under the "Hidden files" folder, select "Show hidden files and folders."
  • Clear "Hide protected operating system files."
  • Click Apply, and then click OK.
Let me know if you find it or not.
Post #49
I've located the file but when I send it to compressed (zipped) folder I get a window saying: Compresses (zipped) folders error "File not found or no read permission"
Post #50
Right click on the file and choose properties. On the General tab, under Attributes:, make sure both boxes are unchecked. Now try to killbox the file again.
Post #51
Under the properties the read only box is checked. When I uncheck it and apply, it says access denied THen I chose ignore and check the properties again and it is still checked under read only
Post #52
This is the last tool for AboutBlank infections that we have not used to try to kill this file.
  • Prepare AboutBuster for use:
    • Download AboutBuster.
    • Unzip the contents of AboutBuster.zip and an AboutBuster directory will be created.
    • Navigate to the AboutBuster directory and double-click on AboutBuster.exe.
    • Click "OK" at the prompt with instructions.
    • Click "Update" and then "Check For Update" to begin the update process.
    • If any updates exist please download them by clicking "Download Update".
    • You should not run the program yet so click "Exit".
  • Boot into Safe Mode
  • Run AboutBuster and save the logs:
    • Browse to where you saved AboutBuster and run AboutBuster.exe.
    • Click OK at the directions prompt.
    • Click Start and then OK to allow AboutBuster to scan for Alternate Data Streams.
    • Click Yes to allow it to shutdown explorer.exe.
    • It will begin to your computer for malicious files. If it asks if you would like to do a second pass, allow it to do so.
    • When it has finished, click Save Log. Make sure you save it as I need a copy of it.
  • Post back with the AboutBuster log and a new HijackThis log.
Let me know if AVG is still finding the file as before. If it is still present, I'll need to ask some of the experts to take a look at this to see how to remove the file.

One other thing to try if the file is still present is to see if you can move the file to another location such as the desktop.
Post #53
Ok so I've tried to move/copy the file to the desktop. It did not work. Here is the log from the aboutbuster:
Scanned at: 10:13:09 PM on: 5/16/2005


– Scan 1 —————————
About:Buster Version 4.0
Reference List : 26

No ADS found on system
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Attempted Clean Of Temp folder.
Pages Reset… Done!

– Scan 2 —————————
About:Buster Version 4.0
Reference List : 26

No ADS found on system
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Error Removing! : C:\WINDOWS\system32\sqlneee.dll
Attempted Clean Of Temp folder.
Pages Reset… Done!


Here is the hijack this log:
Logfile of HijackThis v1.99.1
Scan saved at 10:17:00 PM, on 5/16/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = www.google.com
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m…64/mcinsctl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D5084B9-47E7-4B21-A9C1-C624B36A6C47}: NameServer = 151.164.1.8,206.13.28.12
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


There is the AVG waring of the trojan for that file again. Thanks for all the help. I hope this can fixed.

:D
Post #54
We will get your computer fixed. :) The good news is that your log remains clean. It appears there is just that one very stubborn file remaining to be removed. I have to do some research and may need to get some help from the experts on this one. It will take a day or two but I'll be back.
Post #55
This is what we've come up with thus far.

Disable SpywareGuard:

Right click the running icon of Spywareguard, it will open the program.
Then go to Menu, file, exit.
Then confirm the program is closed.


We need to disable your Microsoft AntiSpyware Real-time Protection as it may interfere with the fixes that we need to make.
  • Open Microsoft AntiSpyware.
  • Click on Tools, Settings.
  • In the left pane, click on Real-time Protection.
  • Under Startup Options uncheck Enable the Microsoft AntiSpyware Security Agents on startup (recommended).
  • Under Real-time spyware threat protection uncheck Enable real-time spyware threat protection (recommended).
  • After you uncheck these, click on the Save button and close Microsoft AntiSpyware.
  • Right click on the Microsoft AntiSpyware icon on the taskbar and select Shutdown Microsoft AntiSpyware.
Please leave the Real-Time protection on both of these programs off until the computer is cleaned.


Be sure that all windows are closed. Click on START < RUN and copy/paste the following into the run box.

regsvr32.exe /U sqlneee.dll

You should get a message that it has been uninstalled succesfully.



Double-click on Killbox.exe to run the program.
In the 'Paste Full Path of File to Delete' box, copy and paste this entry:

C:\WINDOWS\System32\sqlneee.dll

Check the option for "Delete on Reboot". Click the button with the red circle with a white X in it. Click 'yes'. When asked to reboot choose 'yes'.
If you get a "PendingFileRenameOperations Registry Data has been Removed by External Process!" message then just restart manually.

After reboot post a new HijackThis log. Let me know if the file is removed.
Post #57
Double-click on Killbox.exe to run it. In the 'Paste Full Path of File to Delete' box, copy and paste this entry:

C:\WINDOWS\System32\sqlneee.dll


Check the option for "Delete on Reboot". Click Unregister .dll Before Deleting. Click the button with the red circle with a white X in it. Click 'yes'. When asked to reboot choose 'yes'.
If you get a "PendingFileRenameOperations Registry Data has been Removed by External Process!" message then just restart manually.

Post back a fresh Hijackthis log and let us know if the file was able to be removed this time.

If this still does not work, we will need to remove the AppInit_DLLs value manually. One of the other helpers will give me the instructions on how to do this but it may not be until tomorrow. Let me know the results today so I will be able to get those instructions if needed.
Post #58
Sorry it didn't work. I was able to drag the file to the desktop but I still couldn't do anything to it. so I dragged it back to the orginal folder.
Post #59
Are you using Windows XP Home or Pro?


Copy the following bold text into Notepad.
Name the file Appinit.bat
Save as type All Files
Save on the Desktop.

Reg save "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" windows1.hiv
ren windows1.hiv windows.txt

Double click on Appinit.bat
This will create a file on the desktop named windows.txt
(the text in the file will look strange, don't worry about it, just make sure you copy the whole thing)

Post the results as a reply to this thread.
Post #60
regf       Pugf hbin  ¨ÿÿÿnk, ÎÎ7Ÿ UÅ ÿÿÿÿ ÿÿÿÿÿÿÿÿ ¸ x ÿÿÿÿ 0 @ h  Windows ÿÿÿsk x x  Ô  €¸ È   ¤       !  €  !  ?          ?               Ðÿÿÿvk  ˜   ÀUDeviceNotSelectedTimeoutðÿÿÿ1 5  (  h Ðÿÿÿvk  €'   zGDIProcessHandleQuota"þðÿÿÿ9 0  ë=tÀàÿÿÿvk     °ºSpooler2ðÿÿÿy e s Ñ_åàÿÿÿvk  €   5swapdisk h ° ð  X Ðÿÿÿvk  à   . TransmissionRetryTimeoutÐÿÿÿvk  €'   USERProcessHandleQuotan àÿÿÿh ° ð  X ˆ Ø Øÿÿÿvk  €   S AppInit_DLLsm 3 Not sure what Windows I am on. I think it would be home. thanks

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI