Tech Support Forum - View Single Post - TASKMGRU.EXE, MSIMN32.EXE, BHOASS.DLL help!!!!!!!!!

deebo2005 · 04-17-2005, 09:39 PM

Ok i fixed it. All you need to do is delete the following files if you have them, then serch the registry for the files listed below and delete their registries. Also you have to delete the CSLID for bhoass.dll and some other CLSID vales listed under BHO(something)- you can't miss them once u naviagte to the b section of the CLSID registry. You also need to delete registry vales in Local Machine\Software\Microsoft\Internet Explorer\Main- all the ones that start with BHO. Run Hijackthis and it should take care of the rest. Just click on the entries with bhoass.dll, taskmgru.exe and msimn32.exe. If you have any questions I'll check back to see.

File C:\WINNT\bhoass.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\WINNT\explorer32dbg.exe infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\WINNT\iexplore_dbg.exe infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\MSIMN32.EXE infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\TASKMGRU.EXE infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File System Found infected by "SideFind Spyware/Adware" Virus. Action Taken: No Action Taken.

File System Found infected by "ameopt Spyware/Adware" Virus. Action Taken: No Action Taken.

File C:\WINNT\ghj infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\WINNT\lbbho.dll infected by "not-a-virus:AdWare.ToolBar.Neon.a" Virus. Action Taken: No Action Taken.

File C:\WINNT\mfcvi.exe infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\csh4tb.exe infected by "Trojan-Downloader.Win32.Agent.gd" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\mseggo.gif infected by "Trojan-Spy.Win32.Delf.dx" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\msfaol.dll infected by "not-a-virus:AdWare.ClientMan" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\msiaih.dll infected by "not-a-virus:AdWare.Ipend" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\msnimk.gif infected by "not-a-virus:AdWare.Ipend" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\wldr.dll infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken.

File C:\WINNT\system32\_huytam_java.exe infected by "Trojan-Dropper.Win32.Small.mu" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-135009-405.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-214237-447.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-222726-205.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-225803-516.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-225825-322.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-231219-369.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050415-002646-888.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\TEMPOR~1\Content.IE5\619A32H8\LBAss012345678[1].txt infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken.

File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\TEMPOR~1\Content.IE5\8XEZKX2V\tb[1].txt infected by "not-a-virus:AdWare.ToolBar.ToolBand.a" Virus. Action Taken: No Action Taken.

04-17-2005, 09:39 PM	#7 (permalink)
deebo2005 Registered User Join Date: Apr 2005 Posts: 5 OS: Win2000	Ok i fixed it. All you need to do is delete the following files if you have them, then serch the registry for the files listed below and delete their registries. Also you have to delete the CSLID for bhoass.dll and some other CLSID vales listed under BHO(something)- you can't miss them once u naviagte to the b section of the CLSID registry. You also need to delete registry vales in Local Machine\Software\Microsoft\Internet Explorer\Main- all the ones that start with BHO. Run Hijackthis and it should take care of the rest. Just click on the entries with bhoass.dll, taskmgru.exe and msimn32.exe. If you have any questions I'll check back to see. File C:\WINNT\bhoass.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\WINNT\explorer32dbg.exe infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\WINNT\iexplore_dbg.exe infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\MSIMN32.EXE infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\TASKMGRU.EXE infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File System Found infected by "SideFind Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "ameopt Spyware/Adware" Virus. Action Taken: No Action Taken. File C:\WINNT\ghj infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\WINNT\lbbho.dll infected by "not-a-virus:AdWare.ToolBar.Neon.a" Virus. Action Taken: No Action Taken. File C:\WINNT\mfcvi.exe infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\csh4tb.exe infected by "Trojan-Downloader.Win32.Agent.gd" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\mseggo.gif infected by "Trojan-Spy.Win32.Delf.dx" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\msfaol.dll infected by "not-a-virus:AdWare.ClientMan" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\msiaih.dll infected by "not-a-virus:AdWare.Ipend" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\msnimk.gif infected by "not-a-virus:AdWare.Ipend" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\wldr.dll infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken. File C:\WINNT\system32\_huytam_java.exe infected by "Trojan-Dropper.Win32.Small.mu" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-135009-405.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-214237-447.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-222726-205.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-225803-516.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-225825-322.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050414-231219-369.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\Temp\backup-20050415-002646-888.dll infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\TEMPOR~1\Content.IE5\619A32H8\LBAss012345678[1].txt infected by "Trojan.Win32.Agent.cx" Virus. Action Taken: No Action Taken. File C:\DOCUME~1\ADMINI~1.YAM\LOCALS~1\TEMPOR~1\Content.IE5\8XEZKX2V\tb[1].txt infected by "not-a-virus:AdWare.ToolBar.ToolBand.a" Virus. Action Taken: No Action Taken.