sp.dll

In win 98SE :
Start button, Search folders and files, put in
Q330995, Go to EDIT,Select all, Delete,
Go to Recycle EMPTY !
VIOLA !!!!!!!

thanks a lot for your valuable information regarding sp.dll spyware.

I dont know if this will work on your OS but it sure does on mine, win98se.

1. Run CWShredder - fix
2. Uninstall internet explorer 6 then delete all shortcuts and folders at c:/Program Files
3. Run regedit - on Edit tab, tick Find, then search for SE.DLL
4. You will find "SP", right click then modify...delete the last word "DllInstall"
5. Modify also all names with About:blank data and change it to any homepage you want. Then exit when it finished searching.
6. Tick start then Find SE.DLL, delete the file. To delete it make sure there is no RUNDLL32 running when you press Ctrl + Alt + Del, otherwise tick end task.
7. Then make another .dll and rename it as SE.DLL and mark it as read-only file.
8. Run MSCONFIG. On the Startup tab, uncheck all unfamiliar names especially "SP". then restart.
9. Install Internet Explorer 6. Be sure to delete cookies and all files in the temporary internet files folder.
10. If still doesnt work...start from top again.

By the way... i got this SE.DLL when i was browsing for mp3 downloads on the net. be careful with these sites esp. www.freemp3downloader.net. Though, not pretty sure about it.

Had trouble with this file, what happens is that it regenerates itself, and all registry entries, when you open IE. Tried everything from virus scan, spyware scan, hijackthis etc... nothing.<br />
But it turns out the latest version of HJT does in fact remove it. Stupid spyware, someone needs to teach the authors a lesson or two, starting with a meeting with Mr. Tesla coil.

hi, this virus is really a big mess, but finally after about 3 or 4 hours i killed it, i tried some solutions provided here but this is the one that works for me, maybe it also works for you:<br />
<br />
1. run CWSShredder and press the fix button.<br />
2. run HijackThis.exe and check every key with the se.dll or sp.dll, about:blank, and the rundll32.exe c:windowstempse.dll<br />
and press the fix checked button<br />
3. then turn off your pc pressing the power switch then start windows in ms-dos (command prompt only)<br />
4. type cd windowstemp and press return key<br />
5. type del *.tmp<br />
6. type win to start windows<br />
7. run HijackThis.exe again and repeat the 2nd step if necessary.<br />
8.run internet explorer and now you can change your star page<br />
<br />
i hope this work for you, but if not keep trying i;m sure you can killed this fucking worm, trojan or whatever it is, good luck from mexico

reboot into safe mode and you can get rid of it by manually going to the folder it is in and deleting it with a simple shift+delete.
hijackthis and killbox do a great job removing trojans btw, get those two programs.

THIS IS FOR WIN98. MIGHT WORK OTHERS. se.dll is placed into the registry by another dll. The name of the other dll keeps changing. Get REGMON. watch out for all rundll entries. find out the name and path of the other dll. sometimes it might have a .log extension. when you have the name of the other dll file which rundll starts. exit windows. start in dos mode. change to the directory. ATTRIB -h -r FILENAME. now delete it. or better still. open with edit. fill some junk and make it unusable. restart win. will get msg cant find the rogue file. THATS IT. GOOD LUCK.

All the above do not really work.
Ultimately,
Open Internet explorer. Cick Tools, Internet options, Choose the 'program' tab, Click "reset internet settings" tick yes to homepage. then ok.
Then, Do NOT close internet explorer yet!
Now open c:windows
egedit.exe
Search for sp.dll. and modify all reg key field with sp.dll to your fav website, say www.myfavouritewebsite.com
Then search for "about:blank" and do like wise
(You will notice that sp.dll is instructed to load in regedit at ......hkey_currentusersoftwaremicrosoftinternet explorermain ALSO at hkey_local_machinesoftwaremicrosoftinternet explorermain
And some other places in regedit.exe
Pay attention to the key datas on the right plane.)
Right click all those data field with sp.dll or se.dll or msaps.dll in them, and choose "Modify" and modify the key data with whatever you like. (eg http://www.whateveryoulike.com.)
After that use windows file finder and search for sp.dll or whatever shit.dll you are infected with and delete it. to play safe. write a new sp.txt with nothing in it and save it as sp.dll at c:windows emp then right-click it and choose "properties". then tick "read-only".
NOW close your regedit.exe but NOT your internet explorer! make sure no other program is running.
And Do this! (Only 000.0000001% chance of damaging your hard disk actually) . Swtich off the power supply of your comp! do not use , window shut down or windows log off. just TURN the damn power off. It is because when you use the conventional way of shutting down the internet explorer now, the mother of sp.dll trojan/virus or whatever the Fxck it is, is still residing in the back ground memory of your internet explorer, and it will rewrite all its regenerating command back into the regedit and completely undone what you have just done.
So after you have turn off your computer, turn it on! and start your internet explorer, it should now be starting at a page at a address you use to replace all those damned sp.dll related key data fields in regedit.exe.
DO YOU UNDERSTAND?!?????

I just removed se.dll on 3 computers. Ran CWSshredder which detected CWS.hiddendll, however comes back on reboot. I'm doing this from memory so you'll have to fill in the blanks.<br />
<br />
To delete:<br />
1.) Run CWSShredder<br />
2.) Boot into safe mode<br />
3.) Delete LOCAL_MACHINESOFTWAREMICROSOFTWINDOWSCURRENT VERSIONRUN rundll32.exe se.dll entry.<br />
3a.) Look for any other 5 character weird looking dll files it is loading and delete.<br />
4.) The se.dll entry will immediately come back if you hit F5 refresh if your not in safe mode.<br />
5.) Copy from another version of windows the rundll32.exe file in c:windowssystem32. I think this file is actually corrupt when it becomes 31kb. I re-wrote it to be 32.5kb. Again, if your not in safe mode it will be overwritten again with the 31kb version.

I'm pretty sure i have an easy fix for you guys. Just use your ctrl-alt-del menu (Windows Task Manager) and kill off the rundll32.exe components. I expected this'd crash windows but it didn't; and I was then able to kill the sp.dll entries in my registry, as well as the files.

Untested so far, this is under win xp pro

create a file named sp.txt (blank). rename it to sp.dll in the desiredr folder like C:WINDOWSTEMPsp.dll
replace the bad file ! and attrib +a+r+h your sp.dll !
it works !

The sp.dll seems to be used by windows on startup. Delete what you can in find. Go to regedit and do a find for sp.dll and delete those, CAREFUL - there are several dll's that have sp.dll in them DO NOT DELETE THOSE. Restart computer then do a find again and they should delete.

Comment 1 does not work, Comment 4 does not work, and Comment 9 does not work. I'm going to try Comment 5. If I find anything else online I'll post it in big capital letters. This virus is advancing.

create a file named sp.txt (blank). rename it to sp.dll
replace the bad file ! and attrib +a+r+h your sp.dll !
it works !

Another version of the file creating sp.dll is pbio.dll, found in windows/system folder. Running windows in safe or dos mode makes deleting this possible.

I'm not techy and this .dll is annoying. A temporary fix is just to rename the sp.dll to something like 0000sp.dll. It won't get rid of it but it can't run and it doesn't respawn unless you delete it. I rename all the nasties on my pc with 0000 at the start so I can easily find them if someone smart comes round to help fix my pc. :)

hi, had this bitch also on my sys. removing is not so hard, i used a combination of pedit and hijackthis, pedit to kill the rundll32 thread that hold sp.dll in memory and the hijackthis to kill the run-entry in the registry. but that don't hold it away from reinstalling, so i just created a fake sp.dll and made it writeprotected, that seems to work...

1.start windows in ms dos prompt
2.go into c:windows emp (sp.dll is in here)
3. write ren sp.dll sp.dls
4. write edit sp.dll (to make a fake sp.dll) and save it.
5.start windows again
6.there ll be an error occours
7.open start->run>msconfig
8.open startup and unselect the sp.
9.save your settings and restart windows
10.windows starts normally
11.go into c:windows emp
12. delete sp.dll and sp.dls
13.empty recycle bin
14.thats all;)

Hi,<br />
I found a file in the c:windowssystem called bhoa.dll that create the sp.dll on the drive and in the registry. Rename bhoa.dll with other extension , bhoa.kkk , and delete sp.dll. After restart your system will be okay, just change your preferred start page in the browser.<br />
It´s work for me.<br />
bye

Here the utility for remove the new variant:

http://www.downloads.subratam.org/AboutBuster.zip

Greetings from the sunny Italy to all ;)

jesus im not the only one havin problems with this

Yes you can remove sp.dll
In the map recycled are the file Q330995.exe
In system32 the file peaf.dll (can be change from name look at the date)
In the map local setting/temp the file sp.dll

Remove or move this files.

In the map recycled are a file Q330995.exe this file make everytime again the files in the map system32 peaf.dll (can change from name look at the date) and in in the map local settings/temp a file sp.dll

Delete or move (other disk) this files and sp.dll an peaf.dll (or a other name) they don't come back.

Let me now?

u cant remove the bitch because it makes RUN- everytime next to real RUN key. The windows registry the reads this RUN- thing instead of RUN. dunno why bill built in this feature.

I use Mcfee Ant-virus, and i can t remove Sp.dll and StarPage, help me please!

Just restore your windows registry to a previous (no infected) date.
Then run a antivirus to remove the file.

I have the same problem. run adaware, spware programs and nothing resolves it. i dont have the me disk to hand. it creating sp.dll in the temp folder. keep deleting and it comes back. how do i remove it this virus...i dont understand hijack this to well. but i removed it from that but it came back. tried spybot and loads of different software. please help me.

This utility was able to locate Malware that Adaware SE 1.5 missed on two different occassions I have used it.

There is another file with that fucking spyware: offj.dll.
I just can clean up my pc when i boot with a win98 disk and del c:winntsystem32offj.dll
after that, i pass HijackThis and delete alla bout sp.dll, about:blank and offj.dll

it is like a trojan virus.

This file is horribly hard to get rid of...Using a combination of Spysweeper, Hijack this! and Norton Antivirus in safe mode and or with the Ultimate boot CD should allow you to remove this stupid piece of spyware

Hello I can't remove the sp.dll and related Trojan.StartPage, could you help me please. I have already try differents softwares like spybot, spy sweper, cwschredder , ad-adware se and many other.
Thank you in advance.

Hello I can't remove the sp.dll, could you help me please. I have already try differents softwares like spybot, spy sweper, cwschredder and ad-adware se.
Thank you in advance.