Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

What Is Devmgrn.dll?


  • This topic is locked This topic is locked
2 replies to this topic

#1 jclfc

jclfc

  • Members
  • 71 posts
  • OFFLINE
  •  
  • Local time:10:41 AM

Posted 17 September 2007 - 06:47 PM

Hi,
For the last few days every time I attempt to open a browser window, be it IE or My Computer/Documents etc., my AVG free edition pops up with the following message...

Threat Detected!
While opening file: C:\Windows\SYSTEM32\devmgrn.dll
Trojan horse BHO.AXY

I have tried using heal and move to vault but they prompt me to restart and the problem is still there after rebooting. I've even tried in Safe Mode.

I've used HijackThis, AVG free, Avast free, KillBox, BHODemon and AdAware to remove it but nothing has.

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:05:41 AM

Posted 17 September 2007 - 06:58 PM

Saw one indication on the web that it is an AIM malware.

Install Super Antispyware. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/

Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

--------------------------------------------------------------------------------

Post a Hijack This Log in the Hijack This Forum by following the directions in the link below if the programs above have not removed ALL malware. DO NOT post a log in this forum. http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

How to Start Windows in Safe Mode:
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/

Edited by buddy215, 17 September 2007 - 07:01 PM.

“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:03:41 AM

Posted 17 September 2007 - 07:03 PM

Hi jclfc,

Seeing that you have a HJT log posted in the HijackThis Logs and Malware Removal forum posted Here, you shouldn't be making any changes to your system.

This topic will now be closed, since you have an open log posted.
If you have any questions, feel free to send me a PM.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users