• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.
Sign in to follow this  
Followers 0
lance49726

How i got rid of Res://C\windows\ylcmx.dll/sp.html

5 posts in this topic

See the pinned topic http://www.spywareinfoforum.com/index.php?showtopic=8847 for our instructions. cnm

 

I thought i would let you know how i got rid of Res://C:\windows\ylcmx.dll/sp.html#27063 spyware that hijacked my home page. 1st i did everything in the FAQ in this fourm it only helped 1 time when i reconnected to the internet the 2nd time the "home search" page came back. so what i did was remove everthing with "ylcmx" in the registry, note that when the spyware came back it changed its name from"ylcmx.dll" to "vjvrn.dll" then to "hlcvx". Do everything in the FAQ hijack removal, then i removed a icon named ATLPA32 also CHOICE from C:/windows or C:/windows/system32 i forget which, i had to remove the ATLPA32 icon from the safe mode. If you hover your mouse pointer over the icons it will tell you when it was created which be around the time you got hijacked. Reboot and it was gone and didnt come back.

Edited by cnm

Share this post


Link to post
Share on other sites
I thought i would let you know how i got rid of Res://C:\windows\ylcmx.dll/sp.html#27063 spyware that hijacked my home page. 1st i did everything in the FAQ in this fourm it only helped 1 time when i reconnected to the internet the 2nd time the "home search" page came back. so what i did was remove everthing with "ylcmx" in the registry, note that when the spyware came back it changed its name from"ylcmx.dll" to "vjvrn.dll" then to "hlcvx". Do everything in the FAQ hijack removal, then i removed a icon named ATLPA32 also CHOICE from C:/windows or C:/windows/system32 i forget which, i had to remove the ATLPA32 icon from the safe mode. If you hover your mouse pointer over the icons it will tell you when it was created which be around the time you got hijacked. Reboot and it was gone and didnt come back.

All i'am saying is this is how i got rid of it after doing everything in http://www.spywareinfo.com/articles/hijacked/#removal and it did not work,i redone the above removal and when i went in C:/windows and C:/windows/system32 is where i found those icons that was created at the same time i got hyjacked. the names would be different for the various infection.

Share this post


Link to post
Share on other sites

Mods, please merge this thread with the other thread he made about this, then lock them.

 

cnm, you may wish to deal with this in private.

Share this post


Link to post
Share on other sites

Please see the pinned topic http://www.spywareinfoforum.com/index.php?showtopic=8847

 

lance49726 - as noted in the pinned topic, Ad-Aware with the latest update takes care of it except for a few leftovers to be fixed with HijackThis.

 

Please do not post multiple threads about the same thing, and do read the pinned topics.

Share this post


Link to post
Share on other sites
Sign in to follow this  
Followers 0