Spyware mntbo.dll ???

[Anonymous]

Thanks to all who've responded to my post about this spyware.

Unfortunately, NAV2004, Spybot, AAdware, CWShredder have not been able to
remove it.

HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I've gotten attached by some piece of Spyware that I can't get rid of.
Every time my IE 6.0 browser opens up, it defaults to a "web page" called
res://mntbo.dll/index.html#12802
- multiple consecutive runs of Norton AV 2004
- manual registry cleaning of all references to "mntbo"
- deletion of the mntbo.dll file from my hard drive
Any clues?
Thanks!

[Jan Il]

Hi Anonymous :-)

You likely have a hijacker. Follow the instructions below:

HiJackThis: - Free

Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is.
Most of what it lists will be harmless or even required, so DO NOT fix
anything yet.

Open the copy of your log in NotePad and make a copy. Then go to one of the
sites below to post you log:

HiJackThis section
http://forum.aumha.org/

or Spyware and Hijackware Removal Support, here:
http://216.180.233.162/~swicom/forums/

or Net-Integration here:
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx


<<PLEASE, DO NOT POST YOUR LOG FILE TO THIS NEWSGROUP>>

You will need to register to open a new thread to post you log. It is free,
and no one will Spam you, it is one of many that provides this service. Once
registered, go to the HiJackThis section on the forum list and click to
open. Then start a new post and post your log. The experts there will
analyze the log and report back the results. Please allow at least a few
hours or a days time for a response, depending on when you post the log

Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer.


Hope this helps.

Jan :)

[Anonymous]

Thanks for the suggestion, but HiJack This didn't find anything...

Post by Jan Il
Hi Anonymous :-)
HiJackThis: - Free
Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is.
Most of what it lists will be harmless or even required, so DO NOT fix
anything yet.
Open the copy of your log in NotePad and make a copy. Then go to one of the
HiJackThis section
http://forum.aumha.org/
http://216.180.233.162/~swicom/forums/

http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

Post by Jan Il
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
<<PLEASE, DO NOT POST YOUR LOG FILE TO THIS NEWSGROUP>>
You will need to register to open a new thread to post you log. It is free,
and no one will Spam you, it is one of many that provides this service. Once
registered, go to the HiJackThis section on the forum list and click to
open. Then start a new post and post your log. The experts there will
analyze the log and report back the results. Please allow at least a few
hours or a days time for a response, depending on when you post the log
Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer.
Hope this helps.
Jan :)

[Jan Il]

Hi Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

What is the exact nature of your problem at this point? You refer to other
postings, but, I don't recall what they regarded.

Are you getting any error messages? If so, what is the exact wording? What,
if anything, is not functioning properly? What version of Windows are your
running? This information will help us help you better.

Thank you :-)

Jan :)

[Anonymous]

Running Win XP Pro, and NAV 2004 with all updates current...

Post by Jan Il
Hi Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

What is the exact nature of your problem at this point? You refer to other
postings, but, I don't recall what they regarded.
Are you getting any error messages? If so, what is the exact wording? What,
if anything, is not functioning properly? What version of Windows are your
running? This information will help us help you better.
Thank you :-)
Jan :)

[Anonymous]

Reposted my original post per request from "Jan Il <***@localhost.com>"

I've also since tried CWShredder, Lavasoft's A-Adware, Spybot - all to no
avail...

I've gotten attached by some piece of Spyware that I can't get rid of.
Every time my IE 6.0 browser opens up, it defaults to a "web page" called

"res://mntbo.dll/index.html#12802"

- multiple consecutive runs of Norton AV 2004
- manual registry cleaning of all references to "mntbo"
- deletion of the mntbo.dll file from my hard drive
Any clues?
Thanks!
Hi Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

What is the exact nature of your problem at this point? You refer to other
postings, but, I don't recall what they regarded.
Are you getting any error messages? If so, what is the exact wording? What,
if anything, is not functioning properly? What version of Windows are your
running? This information will help us help you better.
Thank you :-)
Jan :)

[D Chadduck]

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything

IIRC Hijack This doesn't "find" anything but does do a full registry
listing where, if you find something, it can fix it.

I second Jan Il regarding posting the HJT log to the sites. Thanks Jan
for the list of them. I never did get a response from Computercops.

Post by Anonymous

Post by Jan Il
Hi Anonymous :-)
HiJackThis: - Free
Go to
http://computercops.biz/downloads-cat-14.html ,
or
http://tinyurl.com/2oce8
and download HiJackThis. Unzip to a folder other than your Desktop or the
Temp folder, doubleclick HiJackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button. Press that, save the log some place you remember where it is.
Most of what it lists will be harmless or even required, so DO NOT fix
anything yet.
Open the copy of your log in NotePad and make a copy. Then go to one of

the

Post by Jan Il
HiJackThis section
http://forum.aumha.org/
http://216.180.233.162/~swicom/forums/

http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;act=ST;f=27;t=6949

Post by Jan Il
or Tom Coyote here: http://forums.tomcoyote.org/index.php?act=idx
<<PLEASE, DO NOT POST YOUR LOG FILE TO THIS NEWSGROUP>>
You will need to register to open a new thread to post you log. It is

free,

Post by Jan Il
and no one will Spam you, it is one of many that provides this service.

Once

Post by Jan Il
registered, go to the HiJackThis section on the forum list and click to
open. Then start a new post and post your log. The experts there will
analyze the log and report back the results. Please allow at least a few
hours or a days time for a response, depending on when you post the log
Remember, you must return to the HJT site to get your answer. It is a good
idea to click the "Notify" box so that you will get an electronic
notification by e-mail to let you know when a response has been posted.
But, you must still return to the site of your answer.
Hope this helps.
Jan :)

[Jan Il]

Hi D :-)

Post by D Chadduck

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything

IIRC Hijack This doesn't "find" anything but does do a full registry
listing where, if you find something, it can fix it.
I second Jan Il regarding posting the HJT log to the sites. Thanks Jan
for the list of them. I never did get a response from Computercops.

You're very welcome. :-) The ones posted are those that are the primary
experts in analyzing the HJT logs, and recommending the proper solutions, if
necessary.

Jan :)

[Jan Il]

Hi :-) Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

Download and run this program.

CWShredder: Free
http://tinyurl.com/2l9kl
or
http://www.majorgeeks.com/download4086.html

HTH

Jan :)

[H Leboeuf]

Jan II

Anonymous has the latest variant of CWS. It's a bad one.
No one should attempt to remove it without extensive knowledge.

I'm submitting this but do not try to remove it alone.
http://forums.spywareinfo.com/index.php?showtopic=8154
--
Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Post by Jan Il
Hi :-) Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

Download and run this program.
CWShredder: Free
http://tinyurl.com/2l9kl
or
http://www.majorgeeks.com/download4086.html
HTH
Jan :)

[Anonymous]

I have the latest variant of CWS? What's CWS? And what's so bad about it?

Post by H Leboeuf
Jan II
Anonymous has the latest variant of CWS. It's a bad one.
No one should attempt to remove it without extensive knowledge.
I'm submitting this but do not try to remove it alone.
http://forums.spywareinfo.com/index.php?showtopic=8154
--
Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Post by Jan Il
Hi :-) Anonymous :-)

Post by Anonymous
Thanks for the suggestion, but HiJack This didn't find anything...

Download and run this program.
CWShredder: Free
http://tinyurl.com/2l9kl
or
http://www.majorgeeks.com/download4086.html
HTH
Jan :)

[Jan Il]

Hi Anonymous :-)

Post by Anonymous
I have the latest variant of CWS? What's CWS? And what's so bad about it?

It's very new and very nasty form of malware, hijacker. It can do harm to
your system. Follow the instructions provided by Henri to get rid of it.

Jan :)

[Jan Il]

Post by H Leboeuf
Jan II
Anonymous has the latest variant of CWS. It's a bad one.
No one should attempt to remove it without extensive knowledge.
I'm submitting this but do not try to remove it alone.
http://forums.spywareinfo.com/index.php?showtopic=8154

Thank you Henri, I appreciate your help.

Jan :)