Results 1 to 6 of 6

Thread: Browser helper AVG antispy

  1. #1
    Junior Member
    Join Date
    Feb 2007
    Posts
    15

    Default Browser helper AVG antispy

    Please help
    several problems :
    Pc Dell Wind XP
    1/ when I run Spyboot it comes an information : Browser Helper Object Valeur Supprimé 55EA1964-F5E4-4D6A-B9B2-125B37655FCB impossible to reject , only option to agree with that and/or remember that for the future. I didn't agree

    2/ When I run AVG Antispyware it shows some medium dangerous cookies and one more dangerous a red one , then system continues to analize untile come to C\Windows\$NtUninstallKB931768$\spuninst\updspapi.dll and then the system stop and i have to switch off Pc and start again

    3/ I have problems in transferring incoming e -mail , when I want to send them a wording is coming mime has to close the program and everything disappears

    Please help

    thank you very much

    Giuseppe

  2. #2
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    giuseppe:

    Quote Originally Posted by giuseppe View Post
    1/ when I run Spyboot it comes an information : Browser Helper Object Valeur Supprimé 55EA1964-F5E4-4D6A-B9B2-125B37655FCB impossible to reject , only option to agree with that and/or remember that for the future. I didn't agree
    According to CastleCops the BHO associated with GUID {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} is a legitimate BHO. See:

    Since you indicate that you can not do a "Deny change" apparently the BHO is being deleted. During some changes the "Deny change" option is greyed out (not an option) in the TeaTimer dialog. This appears to be on changes such as the removal of a Browser Helper Object (Value deleted). This is speculation but I assume that the "Deny change" is grayed out because by the time TeaTimer recognizes the Registry change the underlying code for the BHO has been deleted and therefore denying the change would do no good to save the BHO from being deleted and just leave an orphaned registry entry.

    What is deleting the BHO?

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  3. #3
    Junior Member
    Join Date
    Feb 2007
    Posts
    15

    Default

    YES deny change is greyed out

    how can I reintroduce the 55EA1964-F5E4-4D6A-B9B2-125B37655FCB ?? Probably some malicious program has canceleld it and cause the other problems indicated in my post

    please help

  4. #4
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    giuseppe:

    Quote Originally Posted by giuseppe View Post
    ... how can I reintroduce the 55EA1964-F5E4-4D6A-B9B2-125B37655FCB ??
    From the CastleCops reference above, the GUID {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} BHO is associated with Prevx. Here are some URLs for Prevx:

    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

  5. #5
    Senior Member djpailo's Avatar
    Join Date
    Oct 2005
    Posts
    126

    Default

    Whats the link to the CLSID search at castle cops?

  6. #6
    Spybot Advisor Team [Retired] md usa spybot fan's Avatar
    Join Date
    Oct 2005
    Posts
    5,859

    Default

    djpailo:


    Getting an answer is one thing, learning is another.


    Microsoft Windows XP Home Edition running on a 2.40GHz Intel® Pentium® 4 Processor with 512 MB of RAM and a 533 MHz System Bus.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •