TEST.OCX

Discussion in 'adware, spyware & hijack cleaning' started by upset565, Feb 9, 2004.

Thread Status:
Not open for further replies.
  1. upset565

    upset565 Registered Member

    Joined:
    Feb 9, 2004
    Posts:
    3
    Location:
    New York
    Windows XP; Broadband; Internet Explorer
    Help!
    Ran a Norton Anti-Virus scan-Results: security risk "TEST.OCX"
    in C:/Windows/Program Files
    I can't find it.
    I ran a Spyware and nothing, search, nothing, don't know what to do.
    Can I find it, get rid of it, or do I need to dump everything and reload XP and all my software, which I am willing to do, but will this get rid of it. Please someone help. I am a novice so please take this into consideration.
    Thanks!
     
  2. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    Hi upset565,

    Now dun be so upset ... and lets welcome u to wilders , mate :)

    Follow these instructions and experts here are waiting to get you out frm troubles

    cheers,
     
  3. Unzy

    Unzy Registered Member

    Joined:
    Nov 2, 2003
    Posts:
    1,098
    Location:
    Belgium
    Hi upset

    Welcome at wilders :)

    It's possible it installed on your PC via an ActiveX

    In order to see for us if it's actively running on your PC can you please download a HijackThis log?

    HijackThis

    Open -> scan -> save log as a .txt file and copypaste the complete contents here please, we'll be glad to have a look

    Thanks!

    Cheers,
     
  4. upset565

    upset565 Registered Member

    Joined:
    Feb 9, 2004
    Posts:
    3
    Location:
    New York
    Here it is.
    Thanks
     

    Attached Files:

  5. upset565

    upset565 Registered Member

    Joined:
    Feb 9, 2004
    Posts:
    3
    Location:
    New York
    :'(
    Here is the most updated log of HijackThis
    Thanks for all your help
    Deb
     

    Attached Files:

  6. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi upset565,

    Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/customize/ie/defaults/stp/ymsgr*http://my.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr/*http://www.yahoo.com/ext/search/search.html

    O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com

    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

    O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab

    Then reboot.

    Regards,

    Pieter
     
Thread Status:
Not open for further replies.