CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Slotch.com Hijacking - 6uo4svc.DLL trouble file

 
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Unknown Files [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
Rdytogo

Cadet
Cadet


Joined: Apr 23, 2004
Posts: 7
Location: USA

PostPosted: Fri Apr 23, 2004 4:55 am    Post subject: Slotch.com Hijacking - 6uo4svc.DLL trouble file
Reply with quote

I was recently hijacked by a website named Slotch.com . It installed quite a few AdWare/MalWare programs on my computer, along with multiple porn ads. I called MicroSoft, due to the fact that it destroyed my WinSock (which had to be rebuilt), and we did everything we could to it. I have run Ad-Aware 20 or 30 times in the past several days, and keep coming back to this one file, and the one with it (one comes up in the Ad-Aware scan, the other doesnt, but shares the same basic name. I have tried to delete each of these many times, and only tonight did I find a way to delete one of them (rebooting brings it right back). The other however, is always "In use: Access Denied". Was just hoping that maybe someone could tell me exactly what this file is/does, and how to get rid of it, as I believe it is the "culprit" causing all of these problems.

The names of these files are:
6uo4svc.cpy.dll (can be deleted by using "DOS" and shutting down the Explorer.exe process, but comes back after rebooting)
and
6uo4svc.dll (cannot be accesed, copied, deleted, due to always being in use by another program)

I see that .DLL files cannot be attached directly for some reason, so, I have added the one to a .ZIP file. Any help with this, and how to rid my computer of them would be GREATLY appreciated.

Back to top
View users profile Send private message Yahoo Messenger MSN Messenger
helpless

Colonel
Colonel


Joined: Jan 29, 2004
Posts: 1854


PostPosted: Fri Apr 23, 2004 11:03 am    Post subject:
Reply with quote

Download : HiJack This! from http://computercops.biz/downloads-cat-14.html

Create and Unzip to a folder, not your Desktop or the Temp folder, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, use "Save Log" button, save the log in a text file,
and post it here http://computercops.biz/f67-Trend_Micro_HijackThis_Logs.html

DO NOT FIX ANYTHING YOURSELF NOW, JUST WAIT FOR AN EXPERT TO HAVE A LOOK AT YOUR LOG, you will have to delete files and Reg.Keys. so wait for a "first responder"

Back to top
View users profile Send private message MSN Messenger
Rdytogo

Cadet
Cadet


Joined: Apr 23, 2004
Posts: 7
Location: USA

PostPosted: Mon Apr 26, 2004 4:00 am    Post subject:
Reply with quote

Ok, posted my log

CastleCops Link/t35551-Slotch_com_Hijacking_My_Hijack_This_log_Help_please.html

Thanks for the help helpless.

Back to top
View users profile Send private message Yahoo Messenger MSN Messenger
lilliebet

General
General
Premium Member

Joined: Dec 03, 2003
Posts: 7014

Premium Team F@H

PostPosted: Wed Jun 02, 2004 6:04 pm    Post subject:
Reply with quote

Glad we were able to help. Smile

NOTE: This thread is now closed. Should you need it reopened, please PM a mod.
Everyone else having a similar issue, please launch a new topic for yourselves.

To reduce the chances of future Spyware/Hijacking problems, please follow the suggestions here: CastleCops Link/t7736-So_how_did_I_get_infected_in_the_first_place.html


_________________
Lilliebet...another point of view
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   This topic is locked you cannot edit posts or make replies       All -> FavForums -> Unknown Files All times are GMT
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer