Security Software BHO Hijack - HELP!!!

Status
Not open for further replies.

saumik_

Discoverer
ok thanks to my sis my comp is now infected with what seems to be some kind of BHO/IE trojan.....result = IE windows pop up randomly + multiple tabs open randomly.
it goes by the name of qoMcdefc.dll , is located in windows/system 32 and creates other randomly named files nszmeu.dll,
kgghvdqf.dll etc etc....n it runs under rundll32.exe...
hence i have 2 rundll32.exe's running and so the files cannot be deleted, not even in safe mode.
in ie/tool/manage add ons/bho i see it as a BHO i can even disable it but cant get rid of the damn thing....i tried shredding/deleting/removing it with spybot dosent work...it also creates a windows startup entry i.e. it runs in (rundll32) on startup...even if i remove that entry it keeps coming back.
i hav xp sp2 ...and hav nod32 and spybot never really needed or used any other spyware tools...what do u guys recommend i do to get rid of this :@ ?
 
never heard of this virus before.it may be possible that it must have made copies of itself in the system restore folder of your comp. have you checked there?
 
Just an FYI, Spybot is best is to detect & Remove BHO hijack.
Alternatively you can run HijackThis and remove/delte any suspicious BHO threat
 
Status
Not open for further replies.