Just trying to remove a particularly stubburn spyware program. I used HT and found this BHO file which wasn't listed online. Perhaps related to the spyware?
IECW32.dll
or C:\windows\system\iecw32.dll
Is this harmful or benign? Any thoughts?
To describe the spyware:
homepage is set to res://qhgyr.dll/index.html#96676
Its a bland page called "HOME SEARCH" with the windows symbol in the top left corner.
Pop-ups appear every minute or two.
Very annoying (aren't they all!) Can't be found by Spybot, Ad-aware, or Spyware Doctor.
Canadianize (Nick)

New BHO file
Started by
Canadianize
, Jun 20 2004 07:23 PM
4 replies to this topic
#1
Posted 20 June 2004 - 07:23 PM
#2
Posted 21 June 2004 - 09:26 AM
A google search came up empty when I tried to find that O2 item... not good.
Looks like the home page problem needs a special fix. Could you post your HijackThis log here?
Have you removed anything with HijackThis yet?
-- LB
Looks like the home page problem needs a special fix. Could you post your HijackThis log here?
Have you removed anything with HijackThis yet?
-- LB
Want to help in the fight against malware? Join the SWI boot camp.
#3
Posted 21 June 2004 - 10:04 AM
This is one of the random files associated with the new CWS res:// Hijack. Post your HijackThis log int he Malware forumn and I will give you a hand cleaning it up.
#4
Posted 21 June 2004 - 02:48 PM
I too got this nasty hijacker. I have run SB S&D, Spysweeper, Ad-AwarePro and HijackThis. Spysweeper found files associated with and deleted as did AAPro and HJT. But once the PC is restarted it returns. VERY frustrating. The only luck I've had is to use the AAPro Adwatch however it too is somewhat annoying because every 5 minutes or so I am asked to deny or accept the changes trying to be made. I anxiously await a solution.

#5
Posted 23 June 2004 - 07:34 AM
Hi,
Here is my attached log file.
Unfortunately, I have deleted some of the files through HT, however, they seem to have since respawned as most of them are back!!!!!
Thanks again for help,
Canadianize (Nick)
Here is my attached log file.
Unfortunately, I have deleted some of the files through HT, however, they seem to have since respawned as most of them are back!!!!!
Thanks again for help,
Canadianize (Nick)