473,320 Members | 1,881 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

force a process to release a dll

epots9
1,351 Expert 1GB
i got one of those lovely spyware things where it says u have a virus download thie new software then it opens ie and says DOWNLOAD NOW!!!.

i have been able to track which dll file it uses (tntftqqf.dll), its in the system32 folder...and not even in safe mode will it let me delete, cuz its in use....

any suggestions on how i can delete the dll?

thank in advance.
Aug 15 '07 #1
9 11033
epots9
1,351 Expert 1GB
so far, my 2 options are:

1 -> format
2 -> remove harddrive, plug it into another computer (slave), delete dll, and then plug it back in

:(
Aug 16 '07 #2
bartonc
6,596 Expert 4TB
so far, my 2 options are:

1 -> format
2 -> remove harddrive, plug it into another computer (slave), delete dll, and then plug it back in

:(
Perhaps

regsvr32 /u tntftqqf.dll

in the system32 directory, first???
Aug 16 '07 #3
epots9
1,351 Expert 1GB
Perhaps

regsvr32 /u tntftqqf.dll

in the system32 directory, first???
it says its successful but i still can't delete it cuz its in use :(

i'll try safe mode, i'll tell u how it goes
Aug 16 '07 #4
epots9
1,351 Expert 1GB
safe mode was a no go as well
Aug 16 '07 #5
bartonc
6,596 Expert 4TB
safe mode was a no go as well
Advanced WindowsCare Personal 100% Freeware is great at looking at startup issues.
Aug 16 '07 #6
epots9
1,351 Expert 1GB
bartonc thanks for all your help, but i'm just going to format (in the middle of it right now). I've been monitoring this dll and it makes the computer think that its iexplore.exe that is why my new 4 anti-virus programs don't detect it and why my dozen spyware programs don't detect it...oh well my computer is due for another cleaning anyways.

thanks again bartonc!
Aug 17 '07 #7
Chizl
1
As long as your the Administrator of the machine I have a solution that always works.. The best way to remove a virus type DLL, EXE or Program Folder is deny yourself access to it, then reboot. Then you can take ownership and delete it.
Oct 10 '07 #8
bartonc
6,596 Expert 4TB
As long as your the Administrator of the machine I have a solution that always works.. The best way to remove a virus type DLL, EXE or Program Folder is deny yourself access to it, then reboot. Then you can take ownership and delete it.
Thank you for that. Would you care to give details on denying access and taking ownership, for those of us who have no practice doing so?
Oct 10 '07 #9
Thank you for that. Would you care to give details on denying access and taking ownership, for those of us who have no practice doing so?

Thanks a lot friends....It really worked for me. I faced trouble because of the dll named pmnkkjg. I never felt hard debugging when compare to this crap. At last ur clue helped to delete that guy from system32. It camofulaged itself as THotKey.exe and popups came whenever I invoked IE.

regarding steps to revoke permission, juz rt click and go to security and deny the permissions and also click on advanced button in the security screen itself and override the parent permission. Then reboot ur machine and get back ur permissions and delete it. thats it.

Thanks again guys. I would like to kill the bastards who are all writing these programs to hang others machine. Instead they can try something constructive.
Jan 3 '08 #10

Sign in to post your reply or Sign up for a free account.

Similar topics

6
by: Ganesh | last post by:
Is there a utility by microsoft (or anyone) to force garbage collection in a process without have access to the process code. regards Ganesh
77
by: Charles Law | last post by:
Hi guys I have a time critical process, running on a worker thread. By "time critical", I mean that certain parts of the process must be completed in a specific time frame. The time when the...
18
by: jas | last post by:
Hi, I would like to start a new process and be able to read/write from/to it. I have tried things like... import subprocess as sp p = sp.Popen("cmd.exe", stdout=sp.PIPE)...
13
by: Andy Fish | last post by:
Hi, I am using COM interop to invoke MS word from my .net app. If word pops up a dialog box, my thread obviously hangs until the dialog is answered. Here's the problem: because the app is...
16
by: LP | last post by:
Hi, Considering code below. Will it make GC to actually collect. One application creates new instances of a class from 3rd party assembly in a loop (it has to). That class doesn't have .Dispose or...
2
by: thorax | last post by:
I'm having problems running a release build of an application. The application is a native C++ .NET 2003 MFC application which links to a number of other DLLs, one of which is mixed (SLGSE.dll)...
5
by: Dave Booker | last post by:
I am developing in VS2005, but I have some third-party DLL's that appear to only work correctly when compiled in VS2003. ("Incorrect" operation is defined as a busy-wait that kicks in on a message...
51
by: Hans | last post by:
Hi all, Is there a way that the program that created and started a thread also stops it. (My usage is a time-out). E.g. thread = threading.Thread(target=Loop.testLoop) thread.start() ...
3
by: MarkusJNZ | last post by:
Hi, I have two different applications running on 2003 both in two different vitrual directories. One application runs on the .NET framework 1.1 whilst the other runs on 2.0. If I change the...
7
by: tsmithcs | last post by:
I'm using Visual C++ 6.0 on Windows 2000/XP machines. I can't run this program in release mode because the libraries/dll are not compatiable with release mode. I've looked for new ones and can't...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.