Technology Adware problems.

Status
Not open for further replies.
#21
Like I said, dm***.exe is part of Wareout.

Run ewido again in Safe Mode, see if it cleans it up. ewido can and should remove it.

Win2help.dll isn't an important system file, so you need to get rid of that too. If ewido doesn't remove it when you scan in Safe Mode, download Killbox (in the Knowledge Base), and copy the file location into there. It'll delete it on start-up.
 

Bobby Sands

Well-Known Member
#22
When i run ewido in safe mode it showsup new results with errors in fixing.

Also,should i be running 3 anti spyware programs at once or does it matter?
 
#23
Tupac Tha Great said:
When i run ewido in safe mode it showsup new results with errors in fixing.

Also,should i be running 3 anti spyware programs at once or does it matter?
Doesn't really matter, but they can get in each others way. I wouldn't run scans with all three simultaneously, though. Let one fix what it can, then run another to pick up anything the first missed etc.
 
#25
Run it, find the dm***.exe file and copy the location (C:\Windows\System 32\dmckh.exe or whatever it is) and then hit the "Delete file" button (the red circle with a white cross in it).
 

Bobby Sands

Well-Known Member
#27
File is gone now anyway.but shit is worse now.When im viewin this page for example the page switches every minute.Thats why ive to post quick in seperate posts.
 

Bobby Sands

Well-Known Member
#28
In microsoft anti-spyware beta,when i go to tools,advanced tools,system explorers and then to windows hosts files.There are a load of adware entries there and i cant remove or block them.This must be the problem.?
 
#33
That's just the hosts file you downloaded, which is configured to block ads (hence all the ad sites being listed in there). There's nothing wrong with that host file.
 

Bobby Sands

Well-Known Member
#39
No,im usin Firefox for about 2 months now.

What about this?

NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup


Is the NvCpl.dll ok?I was searching on processlibrary.com for these exe files and dlls.

For NvCpl.dll,it sayes:

Process File: NVCPL.EXE
Process Name: W32.SpyBot.S Worm

Description: NVCPL.EXE is a process which is registered as the W32.SpyBot.S Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx

This is a registered security risk and should be removed immediately. Please see additional details regarding this process
 
Status
Not open for further replies.

Latest posts

Donate

Any donations will be used to help pay for the site costs, and anything donated above will be donated to C-Dub's son on behalf of this community.

Members online

No members online now.
Top