Home > General > Dxahmff.dll

Dxahmff.dll

Please try the request again. Its content is a string of 24 cryptic bytes which is extended by further 24 cryptic bytes at every system start. --- The GiPo tool MoveOnBoot cannot help about this file Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More... The HijackThis report is exactly the same as posted above except from the 5 last "O2" lines missing now.

Thanks so far... ...would be grateful for every hint. Then doubleclick the Hijackthis.exe. Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site. Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply. https://forums.techguy.org/threads/dxahmff-dll.209341/

I cannot exactly relate any malfunction to the presence of dxahmff.dll, if not only its uninvited appearance in HKLM/.../Run+RunOnce and its strange behaviour are reasons enough to suspect. If you're not already familiar with forums, watch our Welcome Guide to get started. So, I tried now -- the log looks ok for me. Running them now showed up a lot of registy corpses, but also one not so harmless dll- and two inf-files, that escaped my attention till now.

  • The facts: On March 1st there were two new entries in my XP registry: HKLM/.../Run : dxahmff : REG_SZ : rundll32 C:\WINDOWS\System32:dxahmff.dll,Init 1 HKLM/.../RunOnce : *dxahmff : REG_SZ : rundll32 C:\WINDOWS\System32:dxahmff.dll,Init
  • Having a name now, I could search for and read a little bit about that nasty little thing.
  • I don't understand much of that NT-internal stuff, but the way AFlooder works, seems to be really astonishing.
  • Beside the download button is a little down pointed arrow, select one of the servers listed.
  • Yes, my password is: Forgot your password?
  • Your cache administrator is webmaster.
  • Copying and pasting the uninstall command didn't work at once: Though the registry entry said "...\System32:..." , I had to use "...\system32:..." , which accords to the spelling of the WindowsExplorer.
  • Advertisement Recent Posts Playing guitar ekim68 replied Feb 7, 2017 at 11:07 PM Word Association poochee replied Feb 7, 2017 at 10:56 PM Word List Game #14 poochee replied Feb 7,
  • If I find a suspicious file, I often (not always) search the registry for its name and delete the entry or - if I'm not sure - change it.
  • click "proceed" to save your settings.

Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.9/ Connection neward, Mar 6, 2004 #1 Sponsor dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,447 That is aflooder do this go to start/run and paste this line rundll32 go to settings(the gear on top of AdAware)>Tweak>Scanning engine and tick "Unload recognized processes during scanning" ...........then........"Cleaning engine" and "Let windows remove files in use at next reboot" then...... Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.8/ Connection

Make sure the following settings are made and on -------"ON=GREEN" From main window :Click "Start" then " Activate in-depth scan" then...... Stay logged in Sign up now! dxahmff.dll Discussion in 'Virus & Other Malware Removal' started by neward, Mar 6, 2004. read this post here Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.5/ Connection

Someone here will be happy to help you analyze the results. The string "dxahmff" only appeared: > as ...\Temp\dxahmff, as the text file I'm writing just now, as file links to both of them in the folder 'Recent', > in 5 Temp.InternetFiles So maybe these 400 in IAMDB.RDB are the ones used by the programms which ZoneAlarm controls. They came back as usual.

Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) Please try the request again. But there IS a NEW effect that I don't think to be normal, though I cannot say whether there is a connection: Since a few days my C:\WINDOWS\explorer.exe (version 6.0.2800.1106; 1,007,104 But I'd never have figured that out alone!

Your cache administrator is webmaster. This site is completely free -- paid for by advertisers and donations. marvelous ! Thread Status: Not open for further replies.

The registry entries and the file behaved like usual. --- I did a Google, an Altavista, and a meta search for "dxahmff". Your cache administrator is webmaster. I did - as mentioned above - an online virus check at Symantec's, but nothing relevant was detected, neither on HD nor in memory. there was placid silence!

I did an online file check on explorer.exe and userinit.exe at Kaspersky's (http://www.kaspersky.com/remoteviruschk.html), but nothing was found. Please try the request again. Not ONE result. --- I had a WindowsCommander full text search on C:\, D:\, and E:\ including all subdirs, hidden and system files, and archives.

So, it really was worth it!

Style Default Style Contact Us Help Home Top RSS Terms and Rules Copyright © TechGuy, Inc. neward, Mar 6, 2004 #5 dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,447 thses should clean up the rest nicely Download and unzip or install these programs/applications if Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.7/ Connection Log in or Sign up Tech Support Guy Home Forums > Security & Malware Removal > Virus & Other Malware Removal > Computer problem?

BTW: Could it be useful to rename this thread from "dxahmff.dll" to "AFlooder: dxahmff.dll"? All rights reserved. At the same time ZoneAlarm has to block every few minutes the attempts of WindowsExplorer to connect to a specific and constant IP in the range of "Everyones Internet Inc.", Huston When scan is finished, mark everything for removal and get rid of it. (Right-click the window and choose"select all" from the drop down menu) then press next and then say yes

Advertisements do not imply our endorsement of that product or service. So thanks again for your clue! neward, Mar 6, 2004 #3 dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,447 frewquently aflooder comes with other baddies so it's worthwhile posting a log just to check, And even C:\WINDOWS\system32\userinit.exe (version 5.1.2600.1106; 22,528 bytes) had - only a few times - tried to peek through the wall.

Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.6/ Connection ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.4/ Connection to 0.0.0.4 failed.




© Copyright 2017 revolutionpc.net. All rights reserved.