marketscore.relevantknowledge

[ctnaber]

Help!! spybot recently picked up this:

Marketscore.RelevantKnowledge: [SBI $AFE40E1E] Library (File, nothing done)
C:\WINDOWS\system32\rlls.dll


I have done lots of research & have tried everything to get rid of this thing. Once spybot has detected it & I click on fix problems my system shuts down & restarts. I then get an error message from windows saying my system has recovered from a fatal error.

I went through windows explorer to try & find "C:\WINDOWS\system32\rlls.dll" but it is not there. I checked in add/remove programs but there is nothing there out of the ordinary. I can relate everything in there to a program I know is on my computer. I checked the exceptions list in windows firewall & did find 2 questionable items which I deleted. I also checked the internet explorer certificates but couldn't see anything.

I also went to ms-dos command & tryed:
mksc.exe -bootremove -uninst:RelevantKnowledge

ossproxy -bootremove -uninst:RelevantKnowledge

NSCheck.exe /uninstall

none of these worked.

What can I do to get rid of this without cracking my system?

[Shaba]

Hi ctnaber and welcome to Safer Networking Forums :)

Click here (http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe) to download HJTInstall.exe
Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT use the AnalyseThis button, its findings are dangerous if misinterpreted.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

[Shaba]

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.

If it had been 10 days or more since your last post, and especially if the helper assisting you posted a response to that post to which you did not reply, the topic will not be reopened.

In that situation, if you still require help, it would be best to start a new topic and include a fresh HijackThis log with a link to your original thread.

Everyone else please begin a New Topic.