Undeletable file CIADMI.DLL

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Hi folks.

I've the above in the system32 directory of XP and it's proving to be
undeletable by every method I've tried so far. It's part of the Alcohol 120%
trojan and operates as a Browser Helper Object. So far I've tried.

1) MBAM and its included tool FileAssassin which tries to delete the file at
the next reboot but fails.

2) Opening a CMD window, closing all apps and shutting down Explorer.exe in
Taskmgr and trying to delete at the command prompt. No luck

3) MBAM in Safe Mode and manual deletion in Safe Mode with Command Prompt.

4) I've tried Unlocker.exe but again no luck.

I have the file disabled in Internet Explorer, Manage Add Ons although I'm
not sure if this is actually disabling it.

Its registry entries are also locked.

File details FYI are:

Size 95,744 bytes
Datestamp 04-08-2004 (4th August 2004)

Short of creating a dual boot system or taking the HD out and putting it in
another pc (which I don't have one of) can anyone suggest a fix?

Perhaps the nice MBAM people can add something that will kill it.

TIA
--
Dave Baker



Re: Undeletable file CIADMI.DLL


| Hi folks.

| I've the above in the system32 directory of XP and it's proving to be
| undeletable by every method I've tried so far. It's part of the Alcohol 120%
| trojan and operates as a Browser Helper Object. So far I've tried.

| 1) MBAM and its included tool FileAssassin which tries to delete the file at
| the next reboot but fails.

| 2) Opening a CMD window, closing all apps and shutting down Explorer.exe in
| Taskmgr and trying to delete at the command prompt. No luck

| 3) MBAM in Safe Mode and manual deletion in Safe Mode with Command Prompt.

| 4) I've tried Unlocker.exe but again no luck.

| I have the file disabled in Internet Explorer, Manage Add Ons although I'm
| not sure if this is actually disabling it.

| Its registry entries are also locked.

| File details FYI are:

| Size 95,744 bytes
| Datestamp 04-08-2004 (4th August 2004)

| Short of creating a dual boot system or taking the HD out and putting it in
| another pc (which I don't have one of) can anyone suggest a fix?

| Perhaps the nice MBAM people can add something that will kill it.

| TIA
| --
| Dave Baker


Boot into the Recovery Console and delete it there.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Undeletable file CIADMI.DLL

Dave Baker wrote:
Quoted text here. Click to load it

No need to diddle with the time stamp
http://tinyurl.com/9kk2xl
Maybe a good idea to run it sandboxed however <g>

Site Timeline