Need help removing malware DLL in WinXP

[HerzvanRentle]

I have a malware dll named syspcap.dll in c:\windows\system32 which I cannot remove. It is loaded very early and is used by winlogon.exe and explorer.

It is affecting mouse performance so I assume it is a keyboard mouse and input capture thingy, capturing everything I type or click.

I cannot delete it. Several "delete on boot" utilities also fail to remove it. Deleteing it in safe mode does not work either. It also shows up on HijackThis as a BHO, but HijackThis cannot remove it either.

Seems crazy that you are not bloody allowed to delete a file on your own bloody system. Please help. Thanks.

 

[PixWinns]

I have a malware dll named syspcap.dll in c:\windows\system32 which I cannot remove. It is loaded very early and is used by winlogon.exe and explorer.

It is affecting mouse performance so I assume it is a keyboard mouse and input capture thingy, capturing everything I type or click.

I cannot delete it. Several "delete on boot" utilities also fail to remove it. Deleteing it in safe mode does not work either. It also shows up on HijackThis as a BHO, but HijackThis cannot remove it either.

Seems crazy that you are not bloody allowed to delete a file on your own bloody system. Please help. Thanks.

This should do the job. Let me know how it worked out.

Site link: http://ccollomb.free.fr/unlocker/#download

Download link: http://ccollomb.free.fr/unlocker/unlocker1.7.7.exe

Good luck.

 

[HerzvanRentle]

I tried this utility and it didn't work for me. I get a 'blue screen' crash.

 

[TTinCO]

Herz, check your hotmail. I sent you a file that may work.

 

[PixWinns]

I have a malware dll named syspcap.dll in c:\windows\system32 which I cannot remove. It is loaded very early and is used by winlogon.exe and explorer.

It is affecting mouse performance so I assume it is a keyboard mouse and input capture thingy, capturing everything I type or click.

I cannot delete it. Several "delete on boot" utilities also fail to remove it. Deleteing it in safe mode does not work either. It also shows up on HijackThis as a BHO, but HijackThis cannot remove it either.

Seems crazy that you are not bloody allowed to delete a file on your own bloody system. Please help. Thanks.

Rename it: syspcap.dll.old - restart start the PC and see if you can delete.

Good luck.

 

[HerzvanRentle]

Thanks for the help guys.

TTinCO, I checked hotmail but there was nothing there, maybe caught by their junk mail filter or sumfink. What was it anyway? Try my email select720 at yahoo.co.uk if you can be bothered.

klowinns, sorry but renaming just wont work with this file.

 

[1cheater]

Herz, have you tried Trend Micro's PC-Cillin?


Free for 30 days http://www.trendmicro.com/download/trial/trial-pcc.asp

 

[InncoLink]

This should do the job. Let me know how it worked out.

Site link: http://ccollomb.free.fr/unlocker/#download

Download link: http://ccollomb.free.fr/unlocker/unlocker1.7.7.exe

Good luck.

Used it once on a folder and it worked like a charm, never on a dll file. The site claims that it also works on dll.

 

[TTinCO]

Herz-the file is probably too big. Go to download.com & do a search for spysweeper. Trend PC-Cillin is also a must have if you don't have a virus scanner. Also, make sure you get all the critical updates at windowsupdate.com