This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Virus- oyewicozi.DLL cannot remove. can anyone help?

1 min read

This thread's last reply is from December 3, 2009, 5:37 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

candcantiques
November 25, 2009, 9:13 PM UTC
Dont know what it is and cannot turn it off or remove it. Tried to find it in regedit had no luck. Tried to remove it in safe mode, no luck. Tried to turn it off in msconfig, turns right back on. Tried to remove it with c cleaner, didn't work. Any ideas?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:08:34 PM, on 11/25/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe

O4 - HKLM\..\Run: [Xnegefameteqariw] rundll32.exe "C:\WINDOWS\oyewicozi.dll",Startup

--
End of file - 939 bytes
MWR 3 day Mod
November 29, 2009, 8:15 AM UTC
[3days:sifot9qu][/3days:sifot9qu]
NonSuch
December 3, 2009, 5:37 AM UTC
a lack of response,