IE Help 'hole copy.exe'

  boo_hiss_boo 15:38 27 Nov 2004
Locked

Hi Guys

I have a new search bar and lots of pop up arriving each time I am on IE. I have Winpatrol running so I was a little suprised (until my daughter said she said yes to something when updating MSN!!)

Anyway, I have tried to remove this through winpatrol (listed as hole copy.exe) but it just stays there and the bar is annoyingly still on screen and the pop up just keep-a-coming.....

Please help

Many Thanks
Boo

  rawprawn 15:46 27 Nov 2004

Try deleting it in Safe Mode, (Tap F8 when booting)

  boo_hiss_boo 16:18 27 Nov 2004

Hi

thansk for the reply. I have tried to delete in safe mode but no joy, I click remove, Winpatrol asks me do I really want to, I click yes and then.... nothing, it just stays there.

I went on to my daughter logon and there were some exe files on her desktop, I have deleted these and removed them from the recycle bin but then I got a message from winpatrol asking if I wanted the programme 'senddumb.exe' to be added to the start up menu. I clicked no, but I think I may end up going round in circle on this one.

Any help greatly appreciated.

Thanks
Boo

  rawprawn 16:25 27 Nov 2004

Download and run Spy Sweeper 30 day free trial. You don't say your OS, but if it's XP, turn system restore off before scanning.

  rawprawn 16:28 27 Nov 2004

could also try this freeclick here program

  rawprawn 16:40 27 Nov 2004

Sorry click here for Spy Sweeper

  boo_hiss_boo 20:23 27 Nov 2004

OK

I have tried all of the above and no joy, lopdotcom was detected and removed but the search bar is still there.

I tried looking at some other threads and found one relating to a search bar at the top and bottom of the screen (which is the same as me). I looked into the thread and it was from a bundle package linked to MSN plus (which my daughter downloaded without me knowing). I followed the link and uninstalled MSN plus, I also ran spy sweeper again.... and still the search bar appears. I can find no mention of it in the add/remove programmes. MSN plus is uninstalled.... spysweeper now tells me no spyware is found.... and STILL the bl**dy search bar appears on the bottom of my screen

Thanks
Boo

  VoG II 21:48 27 Nov 2004

Post a HijackThis log please click here

You will need to

(a) post it in "chunks" because of the 800 word limit on this site

(b) add a blank line every other line to double-space it so that it ends up as intelligible.

  boo_hiss_boo 22:32 27 Nov 2004

Logfile of HijackThis v1.98.2

Scan saved at 21:45:23, on 27/11/2004

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Grisoft\AVG6\avgserv.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wdfmgr.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\DOCUME~1\Mum\LOCALS~1\Temp\Temporary
Directory 1 for hijackthis.zip\HijackThis.exe

  boo_hiss_boo 22:35 27 Nov 2004

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = click here

R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL = click here

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = click here

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = click here

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: (no name) - {A5AE3E08-4175-630D-28E8-23832638C4E9} - C:\DOCUME~1\Hayley\APPLIC~1\OKAYAX~1\hole copy.exe

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP

O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

O4 - HKLM\..\Run: [WinPatrol PLUS] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe

O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0

O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe /background

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=click here

O16 - DPF: Yahoo! Gin - click here

O16 - DPF: Yahoo! Graffiti - click here

O16 - DPF: Yahoo! MahJong - click here

O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - click here

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - click here

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - click here

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - click here

  boo_hiss_boo 22:37 27 Nov 2004

Thanks again, I hope I have posted this correctly... if not sorry.. I will try again

Thanks
Boo

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

AMD Radeon Adrenalin release date, new features, compatible graphics cards

Print designer Kelly Anna on confident mark making & modern femininity

New iMac Pro release date, UK price & specs rumours

Comment créer, utiliser et supprimer son compte Facebook ?