First off I am not sure if the following will solve your problem, but they need doing non-the-less.
Close all (browser) windows & have HJT fix these entries=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\PROGRAM FILES\KONTIKI\BIN\BH304181.DLL (file missing)
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
O4 - HKLM\..\Run: [systray] C:\WINDOWS\SYSTEM\A.EXE
O4 - Startup: FOLDER.HTT
O4 - Global Startup: FOLDER.HTT
O16 - DPF: {DDFFA75A-E81D-4454-89FC-B9FD0631E726} - http://www.bundleware.com/activeX/DS3/DS3.cab
Reboot into safe mode following the instructions here. http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406 & navigate to & delete
C:\WINDOWS\SYSTEM\A.EXE< this one
Uninstall messenger plus & then reinstall it manually & do not install the sponsor, which comes from Lop. Can cause all sorts of problems.
Let us know how this goes after a reboot.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
That, I have no idea. Apologies.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
this can and should be uninstall via add/remove programs .
O4 - HKLM\..\Run: [P2P NETWORKING] C:\WINDOWS\SYSTEM\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART
this 016 should also be fixed .
O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://kr.pristontale.com/nprotect/nprotect/npx.cab
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
caperjack
I hate 20 Questions
13,069 posts since Aug 2003
Reputation Points: 1,064
Solved Threads: 812
RUNDLL32 caused an invalid page fault in
module FX20.CPY.DLL at 0167:10016bf3.
You've still got a piece of spyware stuck in your teeth... :cheesy:
The xxxx.cpy.dll is a spyware component responsible for "phoning home" to download ads when you log on to the Net. The filename itself is randomly generated, but it will always have cpy.dll as part of the name. Basically, you need to find and delete any xxxx.cpl.dll and related files; there'sa good walkthough of the removal process in this link: http://www.computing.net/security/wwwboard/forum/11144.html
DMR
Wombat At Large
7,229 posts since Dec 2003
Reputation Points: 221
Solved Threads: 370
I have an error myself. When I try to open my Windows Media Player..A window pops up saying "killah has caused an error in KERNEL.32.DLL" how can I get rid of this error?
A) While your problem might be related to spyware or the like, your specific error isn't directly related to this thread. You should delete your post here and start a separate thread, giving more information abvout the problem (when did it start, what changes you might have made just prior to the problems' occurrence, etc.). One of the Moderators has posted a notice concerning the "piggybacking" of one problem into/onto a pre-existing thread, and it makes sense:please! if you have your own problem start your OWN thread about it.
i dont like having to split threads and whatnot, plus its hard for us to deal with two problems in the same thread.
Thanks
B) Download and run the spyware/adware removal tools mentioned in this and many other of our recent threads.
DMR
Wombat At Large
7,229 posts since Dec 2003
Reputation Points: 221
Solved Threads: 370
Can you download the following app & run it, making sure to have one internet exploder window open. Save the log & paste the results back here.
VX2Finder
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
Download Killbox from http://download.broadbandmedic.com/VbStuff/KillBox.zip
Unzip to your desktop.
Run Killbox.exe. From the menu click “Fix L2M then click “Kill VX2.BetterInternet"
Restart your system
Next, type javascript:navigator.userAgent or just copy and paste it in your IE Address bar then hit enter.
Post the complete result again. (That is, VX2finder log + the IE results)
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
Please ignore my last post for now & do the following:
Download the VX2 fix here.
You must run it three times in a row to completely remove the files registry keys.
Run VX2finder again & post the log along with a fresh HJT log.
crunchie
Most Valuable Poster
20,095 posts since Feb 2004
Reputation Points: 1,142
Solved Threads: 985
