Yahoo Answers is shutting down on May 4th, 2021 (Eastern Time) and beginning April 20th, 2021 (Eastern Time) the Yahoo Answers website will be in read-only mode. There will be no changes to other Yahoo properties or services, or your Yahoo account. You can find more information about the Yahoo Answers shutdown and how to download your data on this help page.
Trending News
ymsg12encrypt.dll - Virus or not...?
So my computer has a definite problem that I am sure is related to a virus. I have used many virus scanners to try and solve the problem but nothing does. Here is the explanation.
Malware-bytes catches "ymsg12encrypt.dll" as a virus. From my reading, this file is a legit yahoo messenger file but there is a trojan "Win32-Refroso-ejh" that either embeds itself or replaces "ymsg12encrypt.dll" I have tried the manual removal instructions I can find on the internet, tried all the free virus scanners I can find that say they can solve the problem, every scanner finds "ymsg12encrypt.dll" to be a virus, but none of them fix it despite the programs claim that it was successfully quarantined.
Has anyone had this virus? and found a true fix that can really remove this? I don't need links from google, I have googled this to death, I need a sure fire solution to this one.
4 Answers
- 1 decade agoFavorite Answer
YES, IT IS A VIRUS.
That file calls itself these names, to find them you will look in these locations:
%ProgramFiles% is a variable that refers to the Program Files folder. A typical path is C:\Program Files.
%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Temp% is a variable that refers to the temporary folder in the short path form. By default, this is C:\Documents and Settings\[UserName]\Local Settings\Temp\ (Windows NT/2000/XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.
those are how to find the files. look for ALL of them. if any of them are found, DELETE THEM... they are the threat.
%ProgramFiles%\power of silence 1.9\ymsg12encrypt.dll
%ProgramFiles%\vnpower\vnp-fastkiller v.4\ymsg12encrypt.dll
%System%\ymsg.dll
%System%\ymsg12encrypt.dll
%Temp%\absolute dc n chat\ymsg12encrypt.dll
%Temp%\agent_orange_v5\ymsg12encrypt.dll
%Temp%\american-pride-16\m4in.dll
%Temp%\american-pride-16\ymsg12encrypt.dll
%Temp%\aquavoxfreezzze 2nd 1.89.cracked\ymsg12encrypt.dll
%Temp%\craigsbooterv3\ymsg.dll
%Temp%\easyvoice3.0.cracked\ymsg12encrypt.dll
%Temp%\exploitbootv3-crack\ymsg12encrypt.dll
%Temp%\fast dc\ymsg12encrypt.dll
%Temp%\gmcbomberv8\ymsg12encrypt.dll
%Temp%\gods of war v7 - cracked\ymsg12encrypt.dll
%Temp%\master_of_the_voice\master of the voice\ymsg12encrypt.dll
%Temp%\new folder\ymsg12encrypt.dll
%Temp%\poisoned packets\ymsg12encrypt.dll
%Temp%\rolling back lamers\ymsg12encrypt.dll
%Temp%\room destroy 5.4\ymsg12encrypt.dll
%Temp%\room killer 1.2 with loader batamiz\ymsg12encrypt.dll
%Temp%\the killer for yahoo\ymsg12encrypt.dll
%Temp%\yahoo_names_grabber\ymsg12encrypt.dll
%Temp%\ymsg.dll
%Temp%\ymsg12encrypt.dll
%Windir%\temp\ymsg12encrypt.dll
%Windir%\ymsg12encrypt.dll
c:\ymsg.dll
also, have you tried avast?
Hope it helps and sorry you have a virus!
- Anonymous7 years ago
Don't listen to these guys, they clearly have no clue on what they're talking about. I am a developer at Microsoft so I know a thing or two about computers. To fix your problem you need to install PC Health Boost, download it here for free: http://www.pchealthcleaner.net/
It's very light and it's the only antivirus/cleaner with a 99.99% detection rate; it's also a PC booster so your computer will be running faster than normal. Install it, hit run and problem solved. It shouldn't take you more than 5 minutes.
- Anonymous1 decade ago
Follow the instructions listed here closely to remove it completely:
http://www.geekpolice.net/malware-removal-guides-f...
If it doesn't work, you can get 1 to 1 help for free here:
