Jump to content


Photo

New BHO file


  • Please log in to reply
4 replies to this topic

#1 Canadianize

Canadianize

    Member

  • New Member
  • Pip
  • 2 posts

Posted 20 June 2004 - 08:23 PM

Just trying to remove a particularly stubburn spyware program. I used HT and found this BHO file which wasn't listed online. Perhaps related to the spyware?

IECW32.dll

or C:\windows\system\iecw32.dll

Is this harmful or benign? Any thoughts?


To describe the spyware:
homepage is set to res://qhgyr.dll/index.html#96676
Its a bland page called "HOME SEARCH" with the windows symbol in the top left corner.
Pop-ups appear every minute or two.
Very annoying (aren't they all!) Can't be found by Spybot, Ad-aware, or Spyware Doctor.

Canadianize (Nick)

#2 VashonDude

VashonDude

    Forum Deity

  • Trusted Advisor
  • PipPipPipPipPip
  • 1,255 posts

Posted 21 June 2004 - 10:26 AM

A google search came up empty when I tried to find that O2 item... not good.

Looks like the home page problem needs a special fix. Could you post your HijackThis log here?

Have you removed anything with HijackThis yet?

-- LB
Want to help in the fight against malware? Join the SWI boot camp.

#3 PGPhantom

PGPhantom

    Superman of SWI

  • Emeritus
  • PipPipPipPipPip
  • 3,494 posts

Posted 21 June 2004 - 11:04 AM

This is one of the random files associated with the new CWS res:// Hijack. Post your HijackThis log int he Malware forumn and I will give you a hand cleaning it up.

#4 Gablues

Gablues

    Member

  • Full Member
  • Pip
  • 13 posts

Posted 21 June 2004 - 03:48 PM

I too got this nasty hijacker. I have run SB S&D, Spysweeper, Ad-AwarePro and HijackThis. Spysweeper found files associated with and deleted as did AAPro and HJT. But once the PC is restarted it returns. VERY frustrating. The only luck I've had is to use the AAPro Adwatch however it too is somewhat annoying because every 5 minutes or so I am asked to deny or accept the changes trying to be made. I anxiously await a solution. :whistle:

#5 Canadianize

Canadianize

    Member

  • New Member
  • Pip
  • 2 posts

Posted 23 June 2004 - 08:34 AM

Hi,

Here is my attached log file.

Unfortunately, I have deleted some of the files through HT, however, they seem to have since respawned as most of them are back!!!!!

Thanks again for help,
Canadianize (Nick)

Attached Files






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button