PDA

View Full Version : Loop



bidum
2008-05-15, 09:57
Spybot and registry are in a bit of a loop. There is a bho virus that is trying to add info to my registry. Spybot continues to block it from adding, but it keeps trying and is in a bit of a war. Add-delete-add-delete-add-delete.......

How can I get rid of this thing for good.


{1C560255-E04D-483C-8B32-BAE4BE94A19C} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:
Path: C:\WINDOWS\system32\
Long name: ddcDwwxY.dll
Short name:
Date (created): 5/14/2008 11:04:00 PM
Date (last access): 5/15/2008 2:16:12 AM
Date (last write): 5/14/2008 11:04:04 PM
Filesize: 369664
Attributes: archive
MD5: 4E32334B616A1ACA8A5BF07FEB75A895
CRC32: FC110601


{B0A97E5D-B0A5-498C-B786-8DF57605DC3F} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:
Path: C:\WINDOWS\system32\
Long name: fcccbyVM.dll

{E707216F-6AFF-4BD4-962D-EC5CDBA812A1} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:
Path: C:\WINDOWS\system32\
Long name: qoMghfCV.dll
Short name:
Date (created): 5/14/2008 9:54:56 AM
Date (last access): 5/15/2008 2:24:24 AM
Date (last write): 5/14/2008 9:54:58 AM
Filesize: 58368
Attributes: archive
MD5: 67EC51D2527AEF6650FA332B2834B672
CRC32: 988FA2B5

tashi
2008-05-15, 10:03
Hello.

Please follow the procedure in this link:
"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22) where a helper will advise you when available.

Cheers.