K
Kevin Perrott
My computer started exhibiting these exact symptoms today. I saw this
post and checked for req.dat and found req.dll instead along with
another DLL created at the same time called sysload.dll in the
system32 folder. After changing the security permissions, ownership
and read/hidden attributes I found that I still couldn't delete the
req.dll file although it was no problem deleting sysload. Not only
was it still giving me an access is denied message in safe mode
command window but I could no longer changed the attributes either. I
changed the ownership back and the read/hidden attributes were then
able to be changed back to normal and visible and was able to delete
it.
This did not make the problem go away.
I also noticed that the ability to search files and folders from
explorer had been disabled as well and used "DIR /S /O-D" from a
command window to sort a directory listing and got lucky and noticed
that there was a file in the root directory named "1.exe" that was
created on at the same time as well as a sp.exe file. I deleted both
of these, cleared out all my internet temporary files, emptied the
recycle bin, removed one reference to req.dll from the registry and
now my system is back to normal.
Only took me 6 hours after recognizing that there was a problem.. I
think I'll go to sleep now..
Kevin
post and checked for req.dat and found req.dll instead along with
another DLL created at the same time called sysload.dll in the
system32 folder. After changing the security permissions, ownership
and read/hidden attributes I found that I still couldn't delete the
req.dll file although it was no problem deleting sysload. Not only
was it still giving me an access is denied message in safe mode
command window but I could no longer changed the attributes either. I
changed the ownership back and the read/hidden attributes were then
able to be changed back to normal and visible and was able to delete
it.
This did not make the problem go away.
I also noticed that the ability to search files and folders from
explorer had been disabled as well and used "DIR /S /O-D" from a
command window to sort a directory listing and got lucky and noticed
that there was a file in the root directory named "1.exe" that was
created on at the same time as well as a sp.exe file. I deleted both
of these, cleared out all my internet temporary files, emptied the
recycle bin, removed one reference to req.dll from the registry and
now my system is back to normal.
Only took me 6 hours after recognizing that there was a problem.. I
think I'll go to sleep now..
Kevin