atwistedlife
2008-05-26, 15:30
New at this :) If in the wrong place I'm sorry.
Ok I have a BHO, ddcBsQjJ.dll is its name and its in the system32 file. Winpatrol asked if I approved it as an EI helper, I say no but get asked non stop. It's in start up but can't shut it down nor stop it in spybot in the bho with the toggle. Have killed its registry entry manually but it came back and to top it off, the host file whats me to allow a change. No scans are showing this thing at all. I went online and googled it, one site has it listed and if I get their software it will remove it. (don't think its wise to touch that) The site also stated it was created 2/4/08, in their list of nasties, were dozens (understatement) created on the same day, some they claim are variations on the one I have above.
Below is copied from the BHO part of Spybot.
{8053AF4F-F35D-4EC6-A411-039EFB515CD8} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:
Path: C:\WINDOWS\system32\
Long name: ddcBsQjJ.dll
Short name:
Date (created): 26/05/2008 6:47:42 PM
Date (last access): 26/05/2008 9:38:52 PM
Date (last write): 26/05/2008 6:47:42 PM
Filesize: 57344
Attributes:
MD5: 3C24D9E9D652C11434CC35C18058DC7A
CRC32: 3AE31C52
Ok I have a BHO, ddcBsQjJ.dll is its name and its in the system32 file. Winpatrol asked if I approved it as an EI helper, I say no but get asked non stop. It's in start up but can't shut it down nor stop it in spybot in the bho with the toggle. Have killed its registry entry manually but it came back and to top it off, the host file whats me to allow a change. No scans are showing this thing at all. I went online and googled it, one site has it listed and if I get their software it will remove it. (don't think its wise to touch that) The site also stated it was created 2/4/08, in their list of nasties, were dozens (understatement) created on the same day, some they claim are variations on the one I have above.
Below is copied from the BHO part of Spybot.
{8053AF4F-F35D-4EC6-A411-039EFB515CD8} ()
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name:
Path: C:\WINDOWS\system32\
Long name: ddcBsQjJ.dll
Short name:
Date (created): 26/05/2008 6:47:42 PM
Date (last access): 26/05/2008 9:38:52 PM
Date (last write): 26/05/2008 6:47:42 PM
Filesize: 57344
Attributes:
MD5: 3C24D9E9D652C11434CC35C18058DC7A
CRC32: 3AE31C52