[hi!]

My spywareguard caught this Evil Thing trying to change my IE settings! But when I click to Remove the BHO.. it just keeps on popping up the same message and is not getting removed I used AVS virus and Spysweeper and AVS spyware and Adaware but this Thing is not going away!!! I found this nasty thing as stated in Spywareguard but I can not delete it.. it says it's being used right now.. How do I get rid of this please?

Here's the error message:

The following BHO has been added to your system? {13ef2b--4ab6-bb7d-4126b181c517
File Location: c:/Windows/systerm32/pmkhe.dll

I found the file.. now what? How come my software protecters didn't get rid of it? It's making my internet very slow and brings up ONE trick pop up that my computer is running slow and to download this malaware software crap and when I go to websites.. i can actually see the URL on the bottom accessing my browser info help! Thaqnks in advance!

[hi!]

i used safemode but can't delete that file...

here's one of the pop up sites

http://scanner2.malware-scan.com/5_s...o=4586_0_10988

i got another popup telling me to go to www.malwarealarm.com to get rid of the spyware.. someone should report this company!

[Gizzy]

you said you tried removing it in safe mode do you mean you tried deleting it in safe mode or did you try doing a spyware scan in safe mode?

if you didn't try scanning in safe mode then try that,

and when you scanned with the anti-spyware scans did they not detect it or just couldn't remove it?

you can try Superantispyware it's supposed to be a very effective anti-spyware program http://www.superantispyware.com/

[hi!]

i tried everything! Safe mode.. etc.. As mention above.. Spywareguard caught this bugger but when I click to remove BHO.. it said it has remove the BHO and then SG brings up the same Pop Up Message.. when I remove again.. same thing.. and once in a while MY AVG Resident Shield brings up a Threat Detected! box.. it says: While opening file: C:/documents and Settigs/Owner.HI/local Settings/Temporary Internet Files/Content.IE5/SHUBG5UZ/ptch[1] I move to Vault.. it tells me object been moved to vault but still get the same error message later... I can't find local settings once I get into my owner.Hi files?


I used your SuperAntispyware.. which is good because It did recognize that pmkhe.dll file But after I reboot that FILE is still there!!! There has to be a manually way I can just delete that file!!! I used killbox but it won't let me delete it! Help!! This thing is killing my internet!

[cybertech]

You need to post a hijackthis log in the Malware removal forum.

Click here to download HJTInstall.exe

• Save HJTInstall.exe to your desktop.
• Doubleclick on the HJTInstall.exe icon on your desktop.
• By default it will install to C:\Program Files\Trend Micro\HijackThis .
• Click on Install.
• It will create a HijackThis icon on the desktop.
• Once installed, it will launch Hijackthis.
• Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

[cybertech]

I am closing this thread. Anyone with a like problem should start a new thread.