View Single Post - Popup Add

Byteman · 05-31-2005, 05:41 PM

It looks like you have a problem! First, you have this. So I suggest you run a couple scans first,...

http://www.pandasoftware.com/product..._principal.htm
http://housecall.trendmicro.com/hous...start_corp.asp

After that, use taskmanager to see if msole32.exe is running, try and end process if it's present. (the scans may have gotton rid of it).

Then, scan again in hijackthis and if you find the following, check them and fix them.

O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\System32\hp50C5.tmp (file missing)
O3 - Toolbar: blah anti axis - {F841B4DA-36AC-9C19-7FC1-AD8130CD68F3} - C:\PROGRA~1\ACTIVE~1\DUPE 2.dll (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program\Files\PartyPoker\IEExtension.dll
O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://66.117.37.13/dba1865.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe

Then, download and run CCleaner. Post back and let us know how it goes.

05-31-2005, 05:41 PM	#4 (permalink)
Byteman Malware Destroyer Join Date: Apr 2005 Location: Hurricane Heaven... still Posts: 1,095	It looks like you have a problem! First, you have this. So I suggest you run a couple scans first,... http://www.pandasoftware.com/product..._principal.htm http://housecall.trendmicro.com/hous...start_corp.asp After that, use taskmanager to see if msole32.exe is running, try and end process if it's present. (the scans may have gotton rid of it). Then, scan again in hijackthis and if you find the following, check them and fix them. O2 - BHO: VMHomepage Class - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFA} - C:\WINDOWS\System32\hp50C5.tmp (file missing) O3 - Toolbar: blah anti axis - {F841B4DA-36AC-9C19-7FC1-AD8130CD68F3} - C:\PROGRA~1\ACTIVE~1\DUPE 2.dll (file missing) O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program\Files\PartyPoker\IEExtension.dll O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://66.117.37.13/dba1865.exe O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe Then, download and run CCleaner. Post back and let us know how it goes. __________________ Don't byte off more than you can chew...