How to unregister a dll file in Windows XP or Vista?
February 26th, 2007 by Brian
(Most Recent Threat: VirusHeat Removal Instructions and IE Antivirus Removal Instructions)
————————————————————————-
Unregister DLL in Windows XP or Vista
Sometimes we need to unregister a dll file to troubleshoot a problem in Windows XP or Vista. Here’s how to do it:
- From Start –> Run, type “cmd” then click on Open. (Where is RUN in Windows Vista?)
- Type “regsvr32 /u filename.dll” where “filename” is the name of the file that you like to unregister.
Please keep in mind that this involves system modification and can be highly risky. It’s always recommended to keep a system backup handy, in case things go wrong.
Digg
del.icio.us
Google
Yahoo
Reddit
Furl
tony kaye Says
what does this mean?
Loadlibrary (”filename. dll”) failed - the specified module could not be found
Did i delete something?
Mar 4th, 2007 at 1:56 am
Krys Says
same here i get “failed - the specified module could not be found”
Mar 6th, 2007 at 5:22 pm
Brian Says
tony and Krys,
You need to make sure that you are in the right directory where the dll is located. You can change the directories by using the “cd” command in the dos-prompt.
Mar 6th, 2007 at 7:39 pm
ys Says
“It says geplxss.dll was loaded, but the DLLUnregisterServer entry point was not found. File cannot be unregistered.”
The system displays this and does not allow to unregister the DLL.
Mar 11th, 2007 at 2:07 pm
micky Says
I got the same type of response for msvcp71.dll except it said: “msvcp71.dll was loaded, but the DLLUnregisterServer entry point was not found. This file can not be registered.” So I’m not really sure how to deal with this.
Mar 12th, 2007 at 1:20 am
Brian Says
ys, micky,
That particular message means that the DLL file may be a corrupted version in memory. Consider to delete it or rename it in case you need it later on. Do it in safe mode or command line if it’s said being used. Good luck.
Mar 12th, 2007 at 9:38 am
Marius Says
I get this error also, Loadlibrary (”filename. dll”) failed - the specified module could not be found.
I did make sure that I am in the same directory before I ran the regsvr32.exe
any suggestions?
Mar 21st, 2007 at 1:53 pm
Ceila Says
I also got an error message saying: geplxss.dll was loaded, but the DIIUnregistered server entry point was not found. DIIUnregistered server might not be exported, or a corrupt version of geplxss.dll may be in memory. Consider using PView to detect and remove it. Can someone tell me what this is and how to use it? Thanks.
Mar 21st, 2007 at 11:17 pm
Chris Says
hey i have a corrupt dll file called fyxkaah and i followed all the instructions on here but it still wont un register and it refuses to allow me to delete it. i’ve try this all in safe mode too.
any other suggestions, they’s be greatly appreciated
Mar 22nd, 2007 at 9:35 am
Mark Says
To delete a stubborn file that doesn’t want to be deleted.
1. Close all open programs
2. Click on Start, Run, and type CMD and Press Enter to open a Command Prompt window.
3. Click on Start, Run and type TASKMGR.EXE and press Enter to start the Task Manager.
4. Click on the Processes tab, click on the process named Explorer.exe and click on End Process.
5. Minimize the Task Manager but leave it open.
6. Go back to the Command Prompt window and change to the directory where the file is located. To do this, use the CD command.
Example: Make sure you start from the root directory “CD \” then change to the directory where the file is located, such as cd windows\system32
7. Now use the DEL command to delete the offending file. Type DEL “filename” where “filename” is the file you wish to delete.
Example: del undeletable.exe and press enter.
8. Press ALT-TAB to go back to the Task Manager and click File, New Task and enter EXPLORER.EXE to restart the Windows shell.
9. Close the Task Manager
Mar 22nd, 2007 at 1:22 pm
Penni Says
I’m not having any luck. I tried to install the Spylocked Automatice Removal Tool, I got a message saying cannot register c:\program files\enigma software group\spyhunter\i_spfix.dll, so I tried the maual instructions. I searched for the .dll files listed and found only fyxkaah.dll. I tried to unregister the dll but got the same msf the others got entry point was not found. I was in the correct directory. Then I tried teh instuctions Mark gave to delete a stubborn file, but got an access denied message. I also searched for spylocked.exe to delete, but that file was not found.
Are there any other sugggestions? This popup balloon is quite annoying and the blinking icon is even worse.
Mar 25th, 2007 at 8:33 pm
matt Says
oh my god i have tried it all like penni and its not going away, please help
Mar 26th, 2007 at 6:44 pm
Mark V Says
Spyhunter will show you all the registry entries to delete for spylock. Delete them all and delete all cookies for all users on the system. Then the dll fyxkaah.dll will not be able to call its site. But that still leaves the question on how to delete that dll. I am still working on it myself.
Mar 26th, 2007 at 9:23 pm
Penni Says
Starting in safe mode *did* let me delete the one .dll file I had (fyxkaah.dll). The annoying flashing icon seems to be gone (crossing my fingers). This was a real mess. I don’t know how my antivirus software let this thru in the first place. It did tell me today that it was there (duh!).
Mar 27th, 2007 at 9:42 pm
Dave F Says
To save some time go to program files and look for a divx file update. Open the sucka up and take a look at the application files in there, its easy to spot because it has an application in there that has an icon looking like a yellow warning triangle.
You can’t get access to delete but you can rename, once you have done this you then start to terminate applications through ctrl/alt/del one by one, (you will need to keep the windows open, just minimise).
Then go back to the offending file folder and start to delete.
Play ping pong a few times and you can get shut of most of this shite.
Dave F
Mar 30th, 2007 at 4:39 pm
Kevin Binkley Says
after I located the .dll file (in my case it was oyopu.dll) I did a system wide search (from the start menu) for that particular file. it was located in the system32 folder. I dragged it to my desktop and renamed the file extension to .doc. The program will continue to run after you change the extension which prevents you from deleting it at this point. Once you re-start the computer the program is no longer able to run and you can now delete it.
Apr 4th, 2007 at 3:23 pm
Guneet Says
it shows C:\Documents and Settings\ICS 1>
but i want it to be C:\ only.Whats the command?
Apr 6th, 2007 at 1:56 pm
Guneet Says
i got a msg called (the system cannot find the specified file)when i enter system 32. Help……
Apr 6th, 2007 at 2:00 pm
Guneet Says
i dont believe it theres not even a singl file from one of those mentioned above and no process was also running from the ones which were mentioned,i cant even find the dll. files on my system but still the pop up keeps on coming. Plzzzzzz help…..
Apr 6th, 2007 at 2:29 pm
David ARMENIA 4 LIFE Says
HI ALL
I had this sacka yesterday in my pc. I have deleted it today (manually)
download the free removal tool. RUN IT!
It wil find a lot of crap.
Just ckeck where the file or the registery is, then go there and delete it!!!!!!!
Maybe some of you must stop some processes! ckeck for that above in the forum.
If you want to open REGISTERY. Go to RUN. => type: regedit=> Enter
Here you can locat all the stuuf that SPYHUNTER has found and you can delete it manually!!!!
It worked by me and the icon is gone 2!!!
It will take a whyle but if you wanne get ride of it
JUST DO IT.
One more thing. There is a .DLL File in SYSTEM 32!!!
This .dll has an other name by differend computers.
First its not possible to delete this .dll but when you do all what is sayed above then restart pc and you can delete the foker.!!
GOOD LUCKKKK!!!!!!!
ARMENIA 4 LIFE
Apr 6th, 2007 at 5:38 pm
brian Says
Hello. I’ve been infected with this Spylocked stuff, and want to get rid of it. However, my task manager has been disabled by the administrator, which apparently was done when my wife had this computer set up. How do I re-enable the task manager function so I can begin the process of getting rid of this spyware. Thanx ! Brian
Apr 7th, 2007 at 11:09 am
omer ersoy Says
hi, all. i have a great problem with downloading this program. When i download the program, spyhunter is seeming.i delete it but my downloading is also deleted. finally i can’t set up the program (which spylocked automatic tool.) Please help me. i have important data in my computer and windows gives error.
Apr 10th, 2007 at 2:20 pm
Cole Says
I got SpyLocked on my computer and same with Zlob. By manually removing all of them I have gotten rid of all the files except for qzviz.dll. I tried this thing but it said it can’t be registed. This may be bad because I thought I was unregistering it.
Apr 11th, 2007 at 12:24 am
Rob Says
Holy crap what a freakin nightmare. Just wanted to say thanks for all the help I got from this thread in getting rid of spylocked. Cole, try what David suggested, it worked for me. I renamed the file and then deleted it no problem…..
Apr 12th, 2007 at 5:38 pm
Romsven Says
Quote Guneet
it shows C:\Documents and Settings\ICS 1>
but i want it to be C:\ only.Whats the command?
/Quote
The command is “cd..” to go up one directory, so:
C:\Documents and Settings\ICS 1> cd..
C:\Documents and Settings> cd..
C:\>
Or you can also use “cd \” to go strait to the C:\
C:\Documents and Settings\ICS 1> cd \
C:\
Apr 19th, 2007 at 11:33 am
Tom Says
Thank you, this was most helpful. My computer is now as before, except that my internet explorer starts up at aprotectservice.com, even when I change my homepage. Does anyone know how I can correct this? Thanks.
Apr 20th, 2007 at 2:04 pm
Natasha Says
HELP……..HELP………I’VE DOWNLOAD A SOFTWARE ON MY COMPUTER, BUT WHEN I TRY TO OPEN IT, IT SAYS “ENTRY POINT NOT FOUND, THE PROCEDURE ENTRY ISBAFWRITEPTR COULD NOT BE LOCATED IN THE DYNAMIC LINK LIBRARY KERNEL32.DLL. I HAD DELL HELP ME BEFORE AND EVERYTHING WAS GOING GOOD. BUT THIS CAME BACK ON.
Apr 22nd, 2007 at 9:35 pm
Todd Says
Ok, I got this SpyLock crap today and have read everything everyone has suggested. I searched my .dll’s and found 2 causing trouble. Splug.dll and bpvol.dll were the nemas of them, both were found in a folder named Video AX Object in the Programs Files, which also contained 4 other .exe files. I shutdown the process of all of them and renamed them, rebooted and deleted. Now everything is back to normal, no more pop ups, icon in taskbar with “!” is gone, and no more homepage problem, BUT I still have one problem…another taskbar icon with a circled “?” in it and it blinks to a circle in red with an line going through it. I’ve tried deleting the Registry values suggested here and the ones that the auto-tool remover came up (Zlob crap) with on my scan but still the icon in the taskbar remains.
So my question is…can anyone help me in removing this annoying icon? It doesn’t do anytihng (that I know of) unless you click it, which of course leads you to purchase the SpyLock crap.
Thanks.
Apr 22nd, 2007 at 9:52 pm
Ace Says
Omg .. Im still stuck at where the file xkrdk.dll is lol ! im stupid man ..
Apr 25th, 2007 at 7:24 am
Todd Says
Someone help! Please…
Apr 25th, 2007 at 3:47 pm
Tim Says
Hi,
I was reading this with interest as I’ve been trying to rename a file in system32 under Vista and whilst I have UCA turned off I can still not get the system to allow me to do it - any thoughts?
Any way, just to add some contribution as well: Earlier a number of people indicated that ‘…the DLLUnregisterServer entry point was not found. File cannot be unregistered.”’ error message is due to a currupt dll. I’m a software developer so I see this message alot and it is generally nothing to do with currupt files.
There are two types of dlls: the standard one and the COM (ActiveX) based one. The standard one does not use the registry and hence when you run regsvr32 you will get this message as it can find no entry point into them. This type of dll is still quite common and if you need to remove them you can simply delete or rename them (provided Vista lets you).
Cheers,
Tim
Apr 26th, 2007 at 2:00 am
Tim Says
OK I managed to figure out how to rename system32 files in Vista. You have to first take ownership of the file via the security properties, and then change the permissions to full control for yourself. Once this is done you can finally rename the file - what a lot of effort!
Cheers,
Tim
Apr 26th, 2007 at 2:27 am
Walter Says
I can’t find the dll file that is causing the tray allert to stay blinking. I have used spy hunter and believe that all of Spy LOcked is gone from my computer. If I can’t find the file ,how can I stop the blinking allert?
Apr 28th, 2007 at 8:15 am
warren searfoss Says
Hey all i did was uninstall through add/remove programs. Run spybot search and destroy then do a system restore from the day before which i knew wasnt infected. My avast let me know when i got hit so i got out of the site right aways. but too late i was infected. but still got it out.
Apr 29th, 2007 at 5:29 pm
Bruce Says
Hi there..
Thanx for all the help but I’m getting nowhere except fu..ng frustrated. I cant seem to stop the f..ng processes. the bpmini.dll just keep reapearing on the process list. I tried to rename them but its still being used by another application or process so it wont be allowed. Please help cause I live 5 stories up and am seriously thinking of jumping.. (not really)
Apr 30th, 2007 at 11:08 am
Phil Says
is a nightmare, I’ve tried deleting the .dll file but I am unable to trace any which may be causing this problem. Where am I going wrong? any advice would be most welcome!!!
Apr 30th, 2007 at 4:23 pm
plumberB Says
ohmygo_! I got what I think is spylock 3.6 last night. Stupid me, I ignored the Norton warning! Now, my computer is looping with “windows explorer not running,,,shutting down windows explorer,,,restarting windows explorer”,or something like that, over and over again. I cannot seem to stop any processes. Task manager gets locked up with frequent explorer reboots. Stupid me, Stupid me, Stupid me……
May 2nd, 2007 at 9:42 am
agentcooper Says
I followed what Mark upthread said to try and it worked for me. Cheers!
May 3rd, 2007 at 3:00 pm
tine Says
I have just suceeded in deleting the annoying Spylocked (mine was a dxovx.dll), by following Kevin Binkleys instructions.Thank you!
See the instruction underneath:
Kevin Binkley Says
after I located the .dll file (in my case it was oyopu.dll) I did a system wide search (from the start menu) for that particular file. it was located in the system32 folder. I dragged it to my desktop and renamed the file extension to .doc. The program will continue to run after you change the extension which prevents you from deleting it at this point. Once you re-start the computer the program is no longer able to run and you can now delete it.
Apr 4th, 2007 at 3:23 pm
May 4th, 2007 at 5:23 pm
StNicholas Says
how do i know if the .dll file has been unregistered? am i supposed to get some form of confirmation, or do i just presume it worked because i didn’t get an error message?
May 6th, 2007 at 12:30 pm
Peter D Says
This is how I got rid of it,
Run Regedit and search for “spylocked”
Be brave and delete every entry you find with it.
Go to c:\windows\prefetch\ and delete spylocked.pf and everything else starting with spy*.pf Trust me, it doesn’t belong there.
Do a system restore to a day before the infection.
Do a final reboot and your home dry.
Then you should be OK.
Worked for me
Peter D
Johannesburg
May 14th, 2007 at 10:06 am
mike Says
i’m still not sure anybody’s specifically said how to get rid of the ? icon… did a search for the dxovx.dll file and found nothing… WAY too late to do a system restore as i’ve been dealing with this exquisite little inconvenience for weeks now… i bought this comp’ for recording and the audible ‘pop’ from the icon is perhaps THE most annoying problem with this, rendering this comp’ useless for it’s intended purpose…
thanks
May 29th, 2007 at 9:44 pm
mahbz Says
ok wait…do we need to get rid of the zlob file as well if we want this mumbo jumbo gone?!!?!?
May 31st, 2007 at 4:04 pm
Baron Says
After Spyhunter scans your whole computer, do you need to delete ALL “parasites?”
Jun 2nd, 2007 at 10:03 am
Baron Says
“After Spyhunter scans your whole computer, do you need to delete ALL “parasites?”
Jun 2nd, 2007 at 10:03 am “”
Because there are ALOT of parasites and I dont know what they are or if it will hurt my computer if i delete them. Stupid I know but I am computer illiterate.
Jun 2nd, 2007 at 10:09 am
Baron Says
And one more thing… It wont delete any of my other saved data/document will it? Would it even pull any of that up?
Jun 2nd, 2007 at 10:12 am
Dread Says
when every I do regsvr32 /u eeuydc.dll it always display
“eeuydc.dll was loaded, but the DLLUnregisterServer entry point was not found. This file can not be registered.”
when ever I delete it, it always prompt “access denied”. Hmmmm
What will happened if I rename it?
Does it hurt my computer?
The balloon keeps popuping in my windows
Die this Spylocked 4.1…
Please help… Mail me… Thank you so much
Jun 4th, 2007 at 5:06 pm
Emma Says
Arrgggh pls help im clueless and cannot get rid of this stoopis a$$ spylock !!!
Jun 5th, 2007 at 6:49 pm
Gene Says
Thank you EVERYONE!!! IT WORKED!!! Best advice from David Armenia 4 Life, thank you! It was VERY tedious (1,031 registry items deleted) but worked. WHEW!
Jun 13th, 2007 at 3:58 am
Dave Says
Ok, I was lucky and successfully “uninstalled” the program from the “add or remove programs” of the control panel. Regardless, the flashing yellow triangular icon with an exclamation point inside as well as the constant balloon popups remained active. Thanks to this site and the info from Kevin Binkley dated Apr 4th, 2007 at 3:23 pm. I located the “gbjkog.dll” file, converted it to a “doc” extension, moved it to MS Word and deleted it right there. I also had to repair my homepage address located in the “general” tab of “internet properties.” This has been an all day job. Thanks a million for the help!!!
Jun 15th, 2007 at 1:40 am
matt Says
Are there any Attorneys having this same issue with Spycrush? I think we have legal issues here, maybe a class action lawsuit. As Dave stated, he spent all day to get his computer free. Basically this is just the tip of the iceberg as to what’s going on with Spycrush. What’s happening to the little old ladies who does not have a clue except to purchase the product?
I say let’s go after them!!! Anyone else want to go along for the ride?
Jun 19th, 2007 at 12:06 pm
Matt Says
ON VISTA you may have to right-click on the CMD icon and choose to RUN AS ADMINISTRATOR to get a dependency to reg or unreg. In my experience, if you don’t run as administrator, Vista will just sit there and laugh at you.
Jun 22nd, 2007 at 3:06 pm
elizabeth crowley Says
i have try everything to fix it
Jun 23rd, 2007 at 8:18 pm
charlotte mcgrath Says
im having the same problems it is so annoying can someone please help me to take off spycrush 3.3
i don`t know why this company has the damn right to infect everyones computer trying to force them to buy this so called solution i think we should all go forward with matts suggestion and sue the pants off this company
for such an underminded action to one and all if u want me matt im here im not a computer genius so to speak and i have much difficulty with this menace spycrush 3.3
that i cannot remove or do anything with it and in return it has taken over my computers preformance with this darn constant popups saying my pc is infected
when its all their illegal doing if u want my opinion
i think they should get what they fully deserve to think
how many peoples computers have been invaded by these
snakes so why don`t we all sue at them same time for this inconvience they have inflicted upon us and lets see how they are sitting back imagining how many millions they will make on everyone who has been affected by this think of the contrary reaction if everyone slaps a lawsuit in the damages they have done to so many of thousands possibly millions all over the world it is certainly something to seriously consider to show these huge companies that they cannot do this to us no more ……………………
CHARLOTTE MCGRATH
Jun 24th, 2007 at 2:28 am
Sara Ditwiler Says
Help me! WHen I go into C:\windows/system32> i am still getting the error message of “Loadlibrary (”filename. dll”) failed - the specified module could not be found” i work with pharm computers all day… but by far this is the worst.. plz help me.. this stupid balloon is driving me nuts!!!! thanks
Jun 27th, 2007 at 12:28 am
shimo kita Says
I CANNOT delete the flashing X from my system tray.
I CANNOT delete .dll files.
I CANNOT delete afkvvy.dll in System32.
I want to DELETE SpyLock from my computer.
Thank you!
Jun 28th, 2007 at 9:39 am
lyford Says
Isn’t what spycrush does illegal? Hacking your computer and then asking for protection money to get themselves out of your computer? Wont they be prosecuted? At the least the government should look the other way if someone one infected them with a virus…
Jun 29th, 2007 at 11:58 pm
ajix Says
Thanks to Mark..
There’s no damn flashing button anymore =)
To shimo, I think u better try Mark’s steps.. It works find by me.
“”"”Mark Says”"”"
To delete a stubborn file that doesn’t want to be deleted.
1. Close all open programs
2. Click on Start, Run, and type CMD and Press Enter to open a Command Prompt window.
3. Click on Start, Run and type TASKMGR.EXE and press Enter to start the Task Manager.
4. Click on the Processes tab, click on the process named Explorer.exe and click on End Process.
5. Minimize the Task Manager but leave it open.
6. Go back to the Command Prompt window and change to the directory where the file is located. To do this, use the CD command.
Example: Make sure you start from the root directory “CD \” then change to the directory where the file is located, such as cd windows\system32
7. Now use the DEL command to delete the offending file. Type DEL “filename” where “filename” is the file you wish to delete.
Example: del undeletable.exe and press enter.
8. Press ALT-TAB to go back to the Task Manager and click File, New Task and enter EXPLORER.EXE to restart the Windows shell.
9. Close the Task Manager
Jul 2nd, 2007 at 9:16 am
kip atkinson Says
thanks everyone for your help worked great just a scan then reboot and another scan left.
Jul 3rd, 2007 at 3:26 pm
Gerrit Says
Also thanks for all your support and helpfull tips.
After having my desktop infected with VirusProtectPro I first removed the regular files via the Explorer.
The registerfiles were not to be found. However I still got the balloon with the suggestion to download VirusProtectPro. Of course I didn’t do that.
Following the instructions of ajix I deleted the file myqlejy.dll
That was the only file which I could find.
Now I don’t get the message anymore.
Jul 10th, 2007 at 1:05 pm
Ryan Says
Hey all. I was trying to delete VirusProtectPro on my friends new computer with VIsta. The problem is that the windows explorer keeps shutting down every 2 to 3 seconds. Also, at last I try to reboot the computer and it just keeps flashing a black screen. Every once in a while and about 10 minutes windows will start. Any program I try to run in windows gets shut down within 3 seconds. Anyone know about this?
Jul 16th, 2007 at 5:01 am
Rav Says
Ryan,
go here
http://www.xp-vista.com/spyware-removal/virusprotectpro-removal-instructions
Use Internet explorer and type C:\ on the address page to explore your C drive.
Jul 18th, 2007 at 11:30 am
DLL Files Dude Says
Hey.. yeah
I get this error also, Loadlibrary (”filename. dll”) failed - the specified module could not be found.
???
Jul 28th, 2007 at 1:26 pm
jason Says
i got Virusprotectpro junk on my pc has an icon down by the clock that flashes the red shield to a ? mark how do i get rid of this. spyhunter says to delete this khtbpdl.dll but i cant ive tried what this site says and cant get to system32 to do this plz help Thanks
Aug 3rd, 2007 at 11:49 am
Pat Says
ok I have been trying to fix my girlfriend’s computer for hours. She accidently hooked herself to this stupid virus the one where the comp keeps saying “windows explorer has stopped working and is restarting” blah blah blah. Now I have tried to do as everyone mentions, but it literally gives me about 10 seconds time before it loops and does it again, and does not let me do anything further before restarting again and taking off what I have done.
I ran Norton (for some reason it kept running even when it was “restarting” and all it found was some stupid tracking cookie which i already got rid of. I need help because whenever I try and do as everyone says it stops letting me and just restarts again. Any suggestions?? I need HELP so bad!!!! My email is
harry_james_potter33@hotmail.com
and I will be very willing to look into anyone’s advice!! PLEASE HELP ME!!!!!!!!!!
Aug 26th, 2007 at 10:42 pm
deepak Says
@ ABOVE
I HAD A SIMILAR PROBLEM WHEN MY COM GOT ATTACKED BY VIRUS PROTECT PRO
I DID A SYSTEM RESTORE AND THAT HAS HELPED ALOT
NOW THE WINDOWS EXPLORER SOMETIME STOPS RESPONDING BUT THAT HAPPENS ONLY ONCE A DAY OR TWO ………..ATLEAST I AM ABLE TO DO MY DAILY WORK
Aug 28th, 2007 at 1:14 am
Gene Says
AHHHHH !!! Trying to get rid of VirusProtectorPro 3.7 !!!
I still cannot find out which files and .dll’s to delete?
Please please please can someone tell me how to locate these files please.
I have run SpyHunter and it came up with 7 registry items which need removing - but it doesnt tell me where they are or what the .EXE name is?
Plus on my task manager there are no tasks which might be an offending item - or even sound like one?
Is there anything FREE that i can install to do this automatically please? Or can someone please tell me what to do?
HELLLLLLLLPPPPPPPP !!!!!
Aug 28th, 2007 at 1:14 pm
Bob Says
Just got rid of VPP. Got another hard drive and kept the other in the system as a slave. I was able to get rid of the damn dll files just by deleteing them in my computer. I am going to back up to the other hard drive daily,
Sep 15th, 2007 at 1:45 am
Jill Gates LOL! Says
Jill Gates! LOL!
Me again! I got rid of them from my desktop! WOOHOO! Now how is one supposed to know which file.dll is to be deleted? Knowing me I will del something that the sys. needs! Where is that # for that IT professional that I know!
Take care all!
Jill Gates! LMAO!
Sep 17th, 2007 at 5:47 pm
Vivean Says
Hello friends,
The instructions given in this blogs are really good. it helped me a lot to remove the AntiVirGear with also removing the unwanted “System Alert” . Thanks for the instructions and keep up the good work.
Good Job
Vivean
Sep 20th, 2007 at 7:11 am
lex Says
Hello,
I’m getting “cmd is not a valid win32 application.” did i miss a step somewhere?
Sep 23rd, 2007 at 11:10 pm
Raghu Says
Dear Sir,
I could not able run the program please help me out to delete trhe virus called antivergear .
Sep 26th, 2007 at 6:02 pm
Raghu Says
Dear sir ,
I wet to change the directory
Sep 26th, 2007 at 6:03 pm
A tech Says
Well I am not sure anyone will need it at this point but the best thing for Spylocked is to download and run SmitFraudFix in safe mode. very easy to run and it will take care ofit with no problem Icon and all.
I really don’t recommend going in to the registry your self, because if you delete a key you will not get it back unless you mad a backup copy of it before you started. Even than you may find your self in a lot of trouble.
Anyway taht is just my experince with the Mal-Ware.
Sep 30th, 2007 at 7:08 am
Nel Sullivan Says
Had the misfortune to get AntiVirGear on my Dell (OS is Win XP prof.)
I used Add/Remove in Control Panel to remove one part of the junk that comes in with this program, but could not remove the blinking yellow alerts.
I then used system restore to revert to earlier set point and the alerts are now gone.
My question is: Are there still dlls and residual junk from this fake spyware program in my registry; or elsewhere in my computer?
I am reluctant to go into editing of the Registry as
I don’t have the necessary skill to mess around there.
Any advice would be useful. NS
Oct 5th, 2007 at 12:00 pm
Nel Sullivan Says
What does “Your comment is awaiting moderation.” mean?
Oct 5th, 2007 at 12:03 pm
Tim Says
Nel,
1. You should have posted the Antivirgear comment on the antivigear article.
2. “Your comment is awaiting moderation.” Mean that your comment will not be visible to everyone until a moderator or administrator approved it(this is because there are a lots of spam)
3. Depending on the Trojans/Virus/Malware you have on your computer, it might have installed another malware/spyware program on your computer that is not visible to you.
I suggest you to check your computer for virus with an antivirus program like Norton and check for spyware with antispyware program like Spyhunter.
Oct 5th, 2007 at 3:44 pm
Lawrence Says
I followed Marks step and I succedd in deleting the stubborn dll file from window/system32 foder
Thanks Mark
Oct 23rd, 2007 at 11:20 am
miza Says
thanks for everyones advices i’ve got the trojan removed
Dec 11th, 2007 at 5:09 am
Alison Says
Hey I cant change the directory to window/system32…what might i be doing wrong?
Dec 18th, 2007 at 11:34 pm
kmarie Says
somebody please help me…..i cant get this trojan win32.murlo off of my computer. I’ve been to regedit and i cant find any of the values the instructions said to remove.
im getting a “failed - the specified module could not be found” response in the cmd thing, and i cant figure out how to get to the dos-prompt to do the cd command to change the directory.
i have vista and im lost somebody please help me…
Jan 2nd, 2008 at 11:01 pm
mosh Says
hi, i already deleted all the keys in registry and unregister toprates.dll but i cant del it, it says access denied. kindly help.
thanks,
mosh
Jan 5th, 2008 at 8:50 pm
finishguy51 Says
I too have had the same problem as dicussed above. I thought I was down loading an up-date of an active X control. I’ve spent the last three days as time permited to read different threads looking for advice. Way to complicated for me. I just happen to down load a new update for Panda. Panda struggled with it a couple of days but was finaly able to remove it from my system Icon and all.
I’ve learned my lesson… Keep your programs up to date.
Feb 11th, 2008 at 2:47 pm
ben Says
Hey I need to get rid of spy heat 3.9 and all the shit that it added. I tried to dowload a new active x and now have some pretty sweet spyware and viruses that I can’t get rid of. Any help would be awesome. Thanks
Feb 18th, 2008 at 1:13 am
T Says
Okay, so I’ve got this xp antivirus 2008 deal and its driving me crazy. I’ve tried what mark suggested, but it still gives me the same error as before. And, every time I try to move those .dll’s to the desktop, another comes right back into my system32! I’ve tried ending the process first and this did not help.
If anyone out there still checks these, can you offer any advice?
Oh, and Ben, if you haven’t already, try what Mark or Kevin Binkly suggested; it might help you.
Feb 19th, 2008 at 5:49 pm
Graywalker Says
What you need to do when you get a virus like this is use a self-contained CD to boot from. This way, the virus has nowhere to even start up.
I use BartPE to make a CD that boots to a pre-install environment (PE). BartPE has some plugins that will run antivirus and such.
I usually will boot an infected system with my BartPE disk and run trend micro’s Sysclean utility with the latest pattern file. Also Avast, AVG and others are available as plugins. It does take some technical know-how to set up.
Feb 21st, 2008 at 10:10 am
Gowtham Says
FOR REMOVING XP ANTIVIRUS FROM YOUR SYSTEM!
Once the registry entries are deleted there will be no problem.
1.Open “Run..” from start menu.
2.Type “regedit” in it and press enter.
3.In the registry editor. Click the “Edit” tab and press “find…”
4.Now type “xp antivirus” in the empty field, make sure that in the “look at” keys,values and data are checked! and “match whole string only” is unchecked
5.You will get the search results on the empty right hand side of the window.
6.In that delete the reg entry with the string “xp antivirus”
7.If you cant delete it,rename it.
8.Now to the left in the window, in the file browser delete the folder “XP antivirus”
Thsnk you…
Feb 23rd, 2008 at 3:47 am
oguni Says
Some pls help. Am using windows xp. my system is infected by a file sstqr.dll in the system32 folder. I tried dragging it to the desktop, it says cannot move, being used by another person or program.
I tried deleting it without success. It says cannot delete sstqr: being used by another person or program. even in safe mode, still can’t delete it.
Taskmanager shows a process cmss.exe attempt to stop the process says “this is a critical process Task manager can not end this process”.
running regsvr32 /u sstqr.dll brings the message sstqr.dll was loaded, but the Dllunregister server entry point was not found. this file can not be registered.
Pls help my trendmicro antivirus flaging it as a malware. How do I delete this file
Mar 6th, 2008 at 5:21 am
KRT Says
TO enable task manager, if it is disabled by virus.
start–> program –>run regedit, windows registry opens up.
go to
HKEY_CURRENT_USER/software/microsoft/windows/currentversion/policies/system.
look at the folder below it.
if you see registry with DisableTaskMgr, delete it or rename it, this will enable task manager.
Mar 19th, 2008 at 12:14 pm
Jessica Says
I think i finally got rid of this stupid thing.After reading through all the adive and tips everyone gave,i do believe it is finally gone..well we can hope anyway.For those that still have it on your computer these are all the things i did..i hope they work for you..
I went to start, then search, then i typed in Xpantivirus, and don’t forget to check hidden folders.Basically got rid of anything and everything in every file and folder than said pantivirus, and i also restored my computer a couple times. The first time i restored it,i restored it to march 16, i thought i got hit with the virus on march 19th so i figured that would be good.But it didn’t work so i restored it to march 15th the second time and i thought it worked but then i saw that the XP Antivirus 2008 was now on my desktop which i had deleted off of there like yesturday and then when i couldnt get it off my computer that’s when i realized it was a scam.So then i went into start and saw XP Anti Virus 2008 and it had an uninstall option and i uninstalled it and it is now gone from my desktop and the stupid icon that was on my taskbar is gone…so i think it did work..so i thank anyone and everyone who put there advice on here..i very much appreciated it.
I hope the rest of you are able to get this nasty thing off your computers…i was ready to kill someone yesturday…so i know how you feel…i know that was all a long ramble but i hope my advice works for the rest you..
Mar 21st, 2008 at 3:14 pm
Pamela Says
Thank you so much for your website, you save me at least $99 to fix and kill XPAntivirus 2008.
I followed the advice of one gentleman about the system restore and it works, before it poped up every 30 seconds. What else do I have to do? Right now the problem is solved. May I ask someone this question, “Can it I meant XPAntivrus2008 still do any harms to my computer?”
I was tricked to download this because, there was a pop-up window told me that my files were infected with trojan and some spyware, it let me have a free scan, I was frightened to see so many infected files, it offered me a free download, that was when the nightmare started when I read about what “SPYWARE” is, I was very frightened and so stressed, I spent a whole day trying to fix it, I bought M…software, but it didn’t work, the Tech Support told me that it couldn’t get rid of the existing XPAntivirus 2008 Spyware, it can only prevent the future virus.
I tried many ways according to the instruction to fix it and it was hard to get the filename because it was not the same name given in this web which is 2007, the one I had is 2008. I suspect that who owns the domain of that spyware, I look at the whois.net, but I can’t find it, I am wondering it is from the US or from the other countries, I am very surprised why there is no legistration to punish or shut this organization down.
Thank you again dear XP-VISTA, I am very appreciated, this is what we should have done to our friends of the same humankind.
Mar 22nd, 2008 at 10:30 pm
Clarkent Says
that post on Mar 22nd, 2007 at 1:22 pm by Mark worls for me..
in case you are trying to troubleshoot HeatVirus infetion.. find the latest .dll file among these:
iinqyl.dll
wcscqa.dll
wcscqa.dll
wuuawkz.dll
eeioq.dll
wbchha.dll
heuvth.dll
xskmoqx.dll
guadq.dll
jdxah.dll
lvhjtsa.dll
txdkfh.dll
that is in your windows/system32 folder.. delete the .dll file found using his procedure. and the annoying pop up will stop.
To make sure the file wont come back i created a file using the same filename and extension (remember to select ’show file extension’ on folder options) and tag it as read-only file.
Mar 24th, 2008 at 6:20 am
WWilliams Says
XP Antivirus 91 various viruses and spyware. I even have CA Antivirus on my system and it didn’t find any. At first I wondered if XP just wanted the consumer to purchase their product. I called CA, I also tried their on-line chat with no resolution to my satisfaction. I did the ‘run CMD’ and only got more confused. I’m not quite as bad off as some, because my drive C is only 20G and i have two other drives on my system (160G & 80G). I ran search for *.dll and came up with 3123 dll files on drive C alone. Which one is suppose to be causing the problem?????
Mar 24th, 2008 at 10:51 am
sunny Says
after reading all of this and getting nowhere (no fault of anyone here) I went to another blog page and someone said they had also tried all of this and had the antivirus/antispywares programs too (I have norton’s and and antispyware) and still could not get rid of it.
Any how they said go to internet options, advanced settings and reset internet options and it would take care of the stupid program. I figured what do I have to lose, I tried everything esle. IT WORKED, I CANNOT BELIEVE IT. 2 days of fighting with that stupid pop up. By the way, I have windows xp and even my daughter could not get it off. Hope this helps.
Apr 1st, 2008 at 9:42 pm
Ben Says
I have a .dll that can’t be unregistered or deleted or renamed. It says its being used by another program. I’ve tried deleting it in safe mode and with explorer closed. Ive also tried system restore. Magically, almost all my restore points are gone. McAfee says its a trojan called vundo. Its in C:\WINDOWS\System32\khfCsqoO.dll. Any help would be great. I have windows xp service pack 2
Apr 5th, 2008 at 8:35 am
thomas Says
Hey everyone. Havin a bit of trouble with removing the tool bar and its really annoying pop ups. Could someone give me really specific instructions on how to get rid of it in ‘cmd’? I’ve put C:\Windows\System32>regsvr32
/u filename.dll. and the name of some files. How come I can delete some in the list and some I cannot?
Apr 7th, 2008 at 3:42 pm
Thug Says
Are PC’s NOT infected with this XP Antivirus thing supposed to have the wininet.dll and shlwapi.dll files for something else??? Because I’ve never experienced any of the infection symptoms on my laptop before (such as unstoppable popups and false warnings of viral infections, which were on my parent’s infected desktop) and I have a ton of files under these two names when i search for them!!! Please help!!
Thanks!
Apr 13th, 2008 at 1:49 am
Charles Says
I’m trying to do this but i get the error
adlibrary (”filename. dll”) failed - the specified module could not be found
Clearly it’s because i’m not in the right directory…
it says c:\Documents and Settings\Administrator> and i try to change that but i’m having trouble, I really need to get this crap off my computer PLEASE help me.
Apr 16th, 2008 at 2:10 pm
Allan Says
Another hapy customer with a fix due to advice in the page - thks
Apr 17th, 2008 at 4:04 pm
darcey Says
mines the same as charles
i need this crap off ugggh
Apr 19th, 2008 at 2:17 pm
judy Says
This is so annoying!!! OFF OFFF OFFFF
Apr 22nd, 2008 at 2:42 pm
Lori Says
Have you tried this website. I think it did the trick on my computer………I just clicked on the uninstall link
xpantivirus. com//help.php
Apr 25th, 2008 at 1:45 am
Denz Says
TO DELETE THIS WINDOWS XP OR VISTA?
I HAVE A FEW STEPS THAT WORKS IN MY CASE.
1. FIND THE “XPA” SHORTCUT LOCATED USUALLY YOU WILL FIND IT ON THE DESKTOP, right click then HIT PROPERTIES, then
click the “FIND TARGET”. you will see the “XPA”
2. TO RENAME THE FILE INTO .DOC FILE NAME, PLEASE GO TO:
TOOLS>>FOLDER OPTIONS>>VIEW>> then uncheck the “Hide Extension for known file types”. then HIT OK.
3. Now, rename XPA shortuct from .exe to .doc extension file. the file now will be .doc after the renaming.
4. go to START>RUN> AND TYPE “MSCONFIG”
5. go to “startup” tab then unchecked the so called “XPA”
then hit APPLY then OK.
6. choose to restart your computer.
7. Now after that go to desktop where the “XPA” located
which already renamed to .doc then DELETE IT!!
8. after the deletion you can now restart again your PC.
how ever the .dll not yet delete thats the second problem.. but the unstoppable popups will “LOST”.
Apr 28th, 2008 at 4:25 am
Izzy Says
Thanks Sunny, it worked!
May 6th, 2008 at 4:10 pm