View Single Post
Old 02-19-2007, 11:29 PM   #12 (permalink)
Pancake
Security Team (ret.)
 
Pancake's Avatar
 
Join Date: Nov 2003
Location: Victoria.Australia
Posts: 7,404
OS: XP Pro SP3


Close Internet Explorer and keep it closed throughout the entire removal process.


Enter the Control Panel by clicking on the Start menu, then clicking on Run.


Now type control in the Open field and press the OK button.


Double-click on the Add or Remove Programs icon.


Look for the following entry and double-click on it.

DeluxeCommunications


If there is no Add or Remove Programs entry for this programs, click on Start, then Run and type the following in the Open: field:

C:\Program Files\DeluxeCommunications\Dxc.exe /u

and press the OK button.


The DeluxeCommunications uninstall program will load and you will be asked to enter a security code. Enter the security code in the file and then press the OK button.Follow the uninstall unstructions..

Download the FixDXC.reg from the following link and save it on your desktop.

http://download.bleepingcomputer.com/reg/FixDXC.reg


When the FixDCX.reg file has finished downloading double-click on the file. When it asks if you would like to add the information into the Registry, click on the Yes button and then on the OK button at next prompt..


Finally search for the following files. If they exist, they will be in the C:\Documents and Settings\Your login name\Application Data folder. In order to see the Application Data folder may have to enable Windows to show hidden files. When you find these files, delete them if present.

Dxcknwrd.dll
Dxccwrd.dll




Reboot into safe mode and then remove them from the log


R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - Startup: .protected
O4 - Global Startup: .protected
O20 - AppInit_DLLs: dxclib303562752.dll
O23 - Service: Windows Host Services (DLLHOST32) - Unknown owner - C:\WINDOWS\system\dllhost.exe (file missing)
O23 - Service: Microsoft Apache for Windows (Windows Apache Service) - Unknown owner - C:\WINDOWS\wpablin.exe (file missing)

Post a new log when done.
__________________
Eddy

Last edited by Pancake; 02-19-2007 at 11:33 PM.
Pancake is offline