Malware Removal Forums

BHO malware

greg214 · 2007-02-05T22:00:35+00:00

=============================================== 1.) Hello here is my Hijackthis log. 2.) When I first open Explorer it trys to connect to IP 85.12.25.105 or 89.188.16.18 , however SpySweeper prevents this. 3.) When I delete BHO in hijackthis it returns as annoyance. 4.) The registry key is located here: registry key that keeps coming back located here HKEY_CLASSES_ROOT\CLSID\{6D1A2FF3-1ADF-4935-A2A7-CA9DCE67D450}\InprocServer32 5.) I used 2 online scanners and neither one detected this BHO (Kapersky & Trend Micro) 6.) This BHO resets privacy settings in explorer (all cookies become enabled) 7.) C:\WINDOWS\system32\rqrrqon.dll does not exist when I search for the file. (folder settings set to show hidden files) 8.) Ad-Aware deleted initial trojans this BHO is a remnant of the trojan. 9.) CAN SOMEONE PLEASE HELP ME !! THANKS IN ADVANCE !! =============================================== Logfile of HijackThis v1.99.1 Scan saved at 10:58:40 AM, on 2/5/2007 Platform: Windows XP SP2 (WinNT 5.

7 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

Vino Rosso Admin/Teacher Emeritus

February 11, 2007, 5:05 PM UTC

Can I refer you to step 6 above...

Please reboot and provide:
the AVG Anti-Spyware Scan report
a new HijackThis log
and a description of how your PC is behaving - what problems are you now experiencing?

Thanks

greg214

February 11, 2007, 8:17 PM UTC

I prefer spysweeper over AVG

Vino Rosso Admin/Teacher Emeritus

February 11, 2007, 8:50 PM UTC

Hi greg214

Can I refer to one of my previous posts:

I'll only be able to help you if you stick to following my instructions...

There is a reason for using AVG-AS.

Would you still like my help? Please let me know.

Nellie2 Administrator Emeritus

February 20, 2007, 8:59 PM UTC

This topic is now closed due to inactivity. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.