Tech Support Guy banner
  • IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
Status
Not open for further replies.

Is pxwma.dll safe

2K views 5 replies 2 participants last post by  MFDnNC 
#1 ·
:cool: I've noticed a file that my internet explorer uses recently, that I can not find much info on.
I disabled it since I have no reason to see it as safe yet.
I am using WindowsXPP, all updates applied.
Does anyone know anything about this file, and wether or not
it can be trusted.

Code:
Details:
From [Manage Add-Ons]
    Name=CInterfaceObj Object
    Publisher=blank
    Status=Disabled
    Type=Browser Helper Object
    File=pxwma.dll
    Used=0
    Blocked=93
    Class ID={58F07DD3-924D-4141-BC74-299F523A95F1}
    In Folder=C:\WINDOWS
    Version=2.0.0.0
From [pxwma.dll Properties Version tab]
    File Version=2.0.0.0
    Description=blank
    Copyright=blank
    Other version information
        File Version=2.0.0.1
        Internal Name=pxwma.dll
        Language=Swedish
        Original File name=pxwma.dll
wma.dll sounds like windows media audio dynamic link library
Usenet and internet searches find it all over the place in hijackthis logs.
I use Spybot, AdawareSE, housecall web scans, and zonealarm antivirus scans.
Not being in any of this makes it more likely to be a safe file with poor
descriptions. The name px and language swedish, and blank description/copyright info, has me unsure. For the best of me,
I can not match what px could possibly stand for. x maybe memory,
hex, hash, address..err hmm
 
See less See more
#4 ·
Fix these with HJT

Logfile of HijackThis v1.99.1
Scan saved at 05:51, on 07-07-05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com

O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - C:\WINDOWS\pxwma.dll

O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\program files\aim\aim.exe (file missing)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1118193348640

DL http://www.downloads.subratam.org/KillBox.zip

Restart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:

Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box.

C:\WINDOWS\pxwma.dll

Note: It is possible that Killbox will tell you that one or more files do not exist. If that happens, just continue on with all the files. Be sure you don't miss any.

Exit the Killbox.

START – RUN – type in %temp% OK - Edit – Select all – File – Delete
Delete everything in the C:\Windows\Temp folder or C:\WINNT\temp
Empty the recycle bin
Boot and post a new log

Please give feedback on what worked/didn’t work and the current status of your system
 
#5 ·
I'll get my printer online, then give that a try.
So far it hasn't done anything successfully to me.
I was able to get information from the file, doesn't
say much, except there is registry and internet interaction.
And this
InterfaceWWW>Created by ADNS version 7.00.0161 at Wed Jan 03 14:05:37

EDIT:found this on the net, veritas=symantics
pxwma.dll
VERITAS pxwma.dll, v. 1.0.0.2
/dllindex/dll-files.shtml?pxwma
 

Attachments

Status
Not open for further replies.
You have insufficient privileges to reply here.
Top