TheTechGuide Forum

General Category => Tech Clinic => Topic started by: Mel on March 26, 2005, 11:20:09 AM

Title: Removing se.dll
Post by: Mel on March 26, 2005, 11:20:09 AM

Hello, I'm having the same problems as a lot of people are.  Can't seem to completely remove se.dll.  Keeps coming up in Hijackthis.  I have really tried everything from a lot of different site.   I'm stumped!!


Attached is my latest Hijackthis log.

Any help will be greatly appreciated.!!

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_WatchDog.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TOSHIBA\TME3\Tmesbs32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\TME3\TMESBS32.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Access97\Office\OSA.EXE
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\FIREFOX0.8\FIREFOX\FIREFOX.EXE
C:\Documents and Settings\MLOTSPE\Desktop\DllCompare.exe
C:\Documents and Settings\MLOTSPE\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [sp] rundll32 C:\WINDOWS\TEMP\se.dll,DllInstall

Title: Removing se.dll
Post by: guestolo on March 26, 2005, 12:24:23 PM

Please Register and then post back with Your WHOLE hijackthis log

Please READ THIS (http://\"http://www.thetechguide.com/forum/index.php?act=ST&f=4&t=14623&st=0#entry28996\")

Title: Removing se.dll
Post by: mlotspe on March 26, 2005, 03:17:20 PM

I have registered, reran Hijack this and this is the complete log iit generated.  Thanks!

Scan saved at 1:15:18 PM, on 3/26/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_WatchDog.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TOSHIBA\TME3\Tmesbs32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\TME3\TMESBS32.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Access97\Office\OSA.EXE
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\FIREFOX0.8\FIREFOX\FIREFOX.EXE
C:\Documents and Settings\MLOTSPE\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [sp] rundll32 C:\WINDOWS\TEMP\se.dll,DllInstall

Title: Removing se.dll
Post by: guestolo on March 26, 2005, 03:27:20 PM

That's not a complete log
Do another SCAN and save log file

In the Hijackthis log click on EDIT at the top
Then click SELECT ALL
Everything should be highlighted
Right click and select COPY

Come back here and in your reply box Right Click and choose paste

Title: Removing se.dll
Post by: Guest on March 27, 2005, 08:57:03 AM

Did what you asked.  Here's the latest Hijack log.

Logfile of HijackThis v1.99.1
Scan saved at 6:54:24 AM, on 3/27/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_WatchDog.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TOSHIBA\TME3\Tmesbs32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\CheckPoint\SecuRemote\bin\SR_Service.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\TME3\TMESBS32.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\Access97\Office\OSA.EXE
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\FIREFOX0.8\FIREFOX\FIREFOX.EXE
C:\Documents and Settings\MLOTSPE\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [sp] rundll32 C:\WINDOWS\TEMP\se.dll,DllInstall

Title: Removing se.dll
Post by: guestolo on March 27, 2005, 02:16:31 PM

You look like you have done some unnecessary cleaning in your log

Your going to have too restore the entries so I can get a good look at your log

Open Hijackthis>>View the list of backups and Restore all backups

Then come back here and post a fresh Hijackthis log