4 replies to this topic

[Canadianize]

Just trying to remove a particularly stubburn spyware program. I used HT and found this BHO file which wasn't listed online. Perhaps related to the spyware?

IECW32.dll

or C:\windows\system\iecw32.dll

Is this harmful or benign? Any thoughts?


To describe the spyware:
homepage is set to res://qhgyr.dll/index.html#96676
Its a bland page called "HOME SEARCH" with the windows symbol in the top left corner.
Pop-ups appear every minute or two.
Very annoying (aren't they all!) Can't be found by Spybot, Ad-aware, or Spyware Doctor.

Canadianize (Nick)

[VashonDude]

A google search came up empty when I tried to find that O2 item... not good.

Looks like the home page problem needs a special fix. Could you post your HijackThis log here?

Have you removed anything with HijackThis yet?

-- LB

[PGPhantom]

This is one of the random files associated with the new CWS res:// Hijack. Post your HijackThis log int he Malware forumn and I will give you a hand cleaning it up.

[Gablues]

I too got this nasty hijacker. I have run SB S&D, Spysweeper, Ad-AwarePro and HijackThis. Spysweeper found files associated with and deleted as did AAPro and HJT. But once the PC is restarted it returns. VERY frustrating. The only luck I've had is to use the AAPro Adwatch however it too is somewhat annoying because every 5 minutes or so I am asked to deny or accept the changes trying to be made. I anxiously await a solution.

[Canadianize]

Hi,

Here is my attached log file.

Unfortunately, I have deleted some of the files through HT, however, they seem to have since respawned as most of them are back!!!!!

Thanks again for help,
Canadianize (Nick)

Attached Files

•  hijackthis.log   7.49KB   18 downloads