A friends computer is infected with some trojan. At boot up McAfee reports
that image xlibgfl254.dll is not valid. I have checked elsewhere for
removal instructions and seem to have two choices. Edit the registry, which
I am reluctant to do, or use a program from Previx, who I have never heard
of. Does any one know how to remove the trojan? Apparently McAfee can not.
| A friends computer is infected with some trojan. At boot up McAfee reports
| that image xlibgfl254.dll is not valid. I have checked elsewhere for
| removal instructions and seem to have two choices. Edit the registry, which
| I am reluctant to do, or use a program from Previx, who I have never heard
| of. Does any one know how to remove the trojan? Apparently McAfee can not.
|
| Thanks,
| Martin
|
Prevx is excellent. You can download the free removal tool here... http://free.prevx.com/
David H. Lipman wrote:
> From: "Sebastian Gottschalk" <seppi@seppig.de>
>
>
> |
> | Ehm... flatten and rebuild? How else?
>
> Yeah, and use a sledgehammer to kill flies as well.
>
Gottschalk never and I repeat never gives useful advice. As far as I can
see his whole purpose of being on this NG is to demonstrate that he
'knows' more about security than anyone else. Unfortunately a) it's
blinding obvious that he does even know the basics and b) he acts like a
complete unhelpful prat to anyone who ventures into this NG.
| Gottschalk never and I repeat never gives useful advice. As far as I can
| see his whole purpose of being on this NG is to demonstrate that he
| 'knows' more about security than anyone else. Unfortunately a) it's
| blinding obvious that he does even know the basics and b) he acts like a
| complete unhelpful prat to anyone who ventures into this NG.
On the contrary, Sebastian Gottschalk did give good advice "once" (and no this isn't an
April fools day comment) out of his numerous replies.
On Sun, 01 Apr 2007 13:54:59 +0000, David H. Lipman wrote:
>
> On the contrary, Sebastian Gottschalk did give good advice "once" (and no
> this isn't an April fools day comment) out of his numerous replies.
Yea, I have to agree, VB, SG, they are the most positive wealth of
information in this group, never giving bogus information, always giving
details that the people can clearly understand, always more than enough
information to anyone that has questions - oh, and they are always so very
polite and helping to anyone.
"David H. Lipman" <DLipman~nospam~@Verizon.Net> writes:
> From: "JAB" <nochance@nohope.com>
>
>
> | Gottschalk never and I repeat never gives useful advice. As far as I can
> | see his whole purpose of being on this NG is to demonstrate that he
> | 'knows' more about security than anyone else. Unfortunately a) it's
> | blinding obvious that he does even know the basics and b) he acts like a
> | complete unhelpful prat to anyone who ventures into this NG.
>
> On the contrary, Sebastian Gottschalk did give good advice "once" (and no this isn't an
> April fools day comment) out of his numerous replies.
I concur. His helpful-to-abusive ratio is quite low, but it's not 0.
I'm not sure what it is about the security field that PITA prima
donna's are so prevalent, but it is what it is I suppose. Least no
one's paying for any advice given here, so it makes it easier to take
it all with a grain of NaCl.
On Sun, 01 Apr 2007 09:37:34 -0500, Todd H. wrote:
>
> I'm not sure what it is about the security field that PITA prima donna's
> are so prevalent, but it is what it is I suppose.
No, that's not the norm, in fact, most security experts are very nice and
concerned people that are quite willing to share all that they know and to
do it in a way they believe will help the person they are working with or
talking too.
When you run into the prima-donna types you should just ignore them, walk
away, go another direction, etc.... In most cases, the people that have
their heads so far up their butts make serious mistakes by not seeing the
threats around them, by missing something critical, by not really caring
to learn from others.
The effect of SG's response is to subvert the question. Not one reply helps
solve the problem.
So I re-state my question. Please does anyone know how to get rid of the
Trojan?
Thanks,
Martin
"Quercus Robur" <quercus@example.invalid> wrote in message
news:ErDPh.223520$5j1.46911@bgtnsc04-news.ops.worldnet.att.net...
>A friends computer is infected with some trojan. At boot up McAfee reports
>that image xlibgfl254.dll is not valid. I have checked elsewhere for
>removal instructions and seem to have two choices. Edit the registry,
>which I am reluctant to do, or use a program from Previx, who I have never
>heard of. Does any one know how to remove the trojan? Apparently McAfee
>can not.
>
> Thanks,
> Martin
>
Sorry David, I missed your reply. Thanks, I will give Previx a try.
Martin
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:kzDPh.1638$_43.1520@trnddc02...
> From: "Quercus Robur" <quercus@example.invalid>
>
> | A friends computer is infected with some trojan. At boot up McAfee
> reports
> | that image xlibgfl254.dll is not valid. I have checked elsewhere for
> | removal instructions and seem to have two choices. Edit the registry,
> which
> | I am reluctant to do, or use a program from Previx, who I have never
> heard
> | of. Does any one know how to remove the trojan? Apparently McAfee can
> not.
> |
> | Thanks,
> | Martin
> |
>
> Prevx is excellent. You can download the free removal tool here...
> http://free.prevx.com/
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
Quercus Robur wrote:
> The effect of SG's response is to subvert the question. Not one reply helps
> solve the problem.
> So I re-state my question. Please does anyone know how to get rid of the
> Trojan?
Hi,
Sebastians answer was the right one, but maybe not very gently.
Google for xlibgfl254.dll and you will find a solution to remove the
trojan with prevx1. you can also boot with Knoppix and remove
xlibgfl254.dll.
But the effect is the same: Maybe that you have removed the trojan or a
parts of it, but the greek soldiers are still active on your system.
Finding these soldiers is nearly impossible, unless you have a clean
reference-system for to compare with the infected system.
It is more easy and secure to rebuild the system from scratch.
bye
Christoph
Sebastian Gottschalk wrote:
> JAB wrote:
>
>> David H. Lipman wrote:
>>> From: "Sebastian Gottschalk" <seppi@seppig.de>
>>>
>>> |
>>> | Ehm... flatten and rebuild? How else?
>>>
>>> Yeah, and use a sledgehammer to kill flies as well.
>>>
>> [...]
>> it's blinding obvious that he does even know the basics and
>
> See above for what the basics are, even though some people like to ignore
> them.
>
> Oh, BTW, the basics of posting here: private discussion belong to the
> medium E-Mail. Thus fup2p.
Can you tell me where to find the bit where it says you have to act like
a spoilt little child in any thread to which you reply?
Oh, BTW, please don't bother replying as as always you will have nothing
of interest or help to say.
"Christoph Hanle" <ng@leinpfad.de> wrote in message
news:460ff271$0$6438$9b4e6d93@newsspool2.arcor-online.net...
> Quercus Robur wrote:
>> The effect of SG's response is to subvert the question. Not one reply
>> helps
>> solve the problem.
>> So I re-state my question. Please does anyone know how to get rid of the
>> Trojan?
>
> Hi,
> Sebastians answer was the right one, but maybe not very gently.
> Google for xlibgfl254.dll and you will find a solution to remove the
> trojan with prevx1. you can also boot with Knoppix and remove
> xlibgfl254.dll.
> But the effect is the same: Maybe that you have removed the trojan or a
> parts of it, but the greek soldiers are still active on your system.
> Finding these soldiers is nearly impossible, unless you have a clean
> reference-system for to compare with the infected system.
> It is more easy and secure to rebuild the system from scratch.
> bye
> Christoph
>
Trojan xlibgfl254.dll removal? 
Linear Mode
