Hi all,

I'm asking a bit OT here but there are so many clever helpful people so
here goes.

Running Winpatrol, I keep getting a prompt asking me to add an IE helper
file awtqn.dll. I suspect its malware and have run several programs to
try and remove it - all to no avail.

It seems very clever at hiding itself and reappearoing on winpatrol's IE
helper's list despite removing it every time.

Any ideas out there?

Maybe a warning: this all coincided with downloading Revolver Mail - a
pile of crap if ever there was one!

Regards

B.

Hello,

I found that I needed to download a few anti-spyware type programs,
including the one from Microsoft. Microsoft's offering didn't for example
find stuff that Spyware Doctor did. So it's a case of trying a few
unfortunately as I know what you mean about programs hiding themselves.
They are VERY clever.

"BrianE" <(E-Mail Removed)> wrote in message
news:d5av4f$fcs$(E-Mail Removed)...
> Hi all,
>
> I'm asking a bit OT here but there are so many clever helpful people so
> here goes.
>
> Running Winpatrol, I keep getting a prompt asking me to add an IE helper
> file awtqn.dll. I suspect its malware and have run several programs to try
> and remove it - all to no avail.
>
> It seems very clever at hiding itself and reappearoing on winpatrol's IE
> helper's list despite removing it every time.
>
> Any ideas out there?
>
> Maybe a warning: this all coincided with downloading Revolver Mail - a
> pile of crap if ever there was one!
>
> Regards
>
> B.

"T200" <(E-Mail Removed)> wrote in
news:2L7ee.52$(E-Mail Removed):

> Hello,
>
> I found that I needed to download a few anti-spyware type programs,
> including the one from Microsoft. Microsoft's offering didn't for
> example find stuff that Spyware Doctor did. So it's a case of trying
> a few unfortunately as I know what you mean about programs hiding
> themselves. They are VERY clever.

Thanks. I'll persevere..

:-)

B.

BrianE <(E-Mail Removed)> wrote in
news:d5av4f$fcs$(E-Mail Removed):

> Hi all,
>
> I'm asking a bit OT here but there are so many clever helpful people
> so here goes.
>
> Running Winpatrol, I keep getting a prompt asking me to add an IE
> helper file awtqn.dll. I suspect its malware and have run several
> programs to try and remove it - all to no avail.
>
> It seems very clever at hiding itself and reappearoing on winpatrol's
> IE helper's list despite removing it every time.
>
> Any ideas out there?
>
> Maybe a warning: this all coincided with downloading Revolver Mail - a
> pile of crap if ever there was one!
>
> Regards
>
> B.

Try BHO Demon.

--
Adam and Eve - the worlds happiest couple ever.
Neither had a mother-in-law.

BrianE wrote:

> Hi all,
>
> I'm asking a bit OT here but there are so many clever helpful people
> so here goes.
>
> Running Winpatrol, I keep getting a prompt asking me to add an IE
> helper file awtqn.dll. I suspect its malware and have run several
> programs to try and remove it - all to no avail.
>
> It seems very clever at hiding itself and reappearoing on winpatrol's
> IE helper's list despite removing it every time.
>
> Any ideas out there?
>
> Maybe a warning: this all coincided with downloading Revolver Mail -
> a pile of crap if ever there was one!
>
> Regards
>
> B.

Hi Brian,

I decided to have a look at this "crap", ran Total Uninstall as the
supervising shell in which the installation took place... but no such
dll was installed, not even after the first run... remarkable was,
though, that the program tried to contact a server (without any account
information entered).

Also I 'googled' for the dll, and nothing showed up... Now - with
random naming that doesn't have to mean anything - so my question is:
Can you access this DLL (Winpatrol should give a path to the file), can
you get "properties" of it, does it show a version tab with for
instance company info?

If this persists, why not check out HiJackThis, run a full scan, save
the log, and post it to one of the many security related forums
(Wilders for instance).

Regards
Dick

>
> Also I 'googled' for the dll, and nothing showed up... Now - with
> random naming that doesn't have to mean anything - so my question is:
> Can you access this DLL (Winpatrol should give a path to the file), can
> you get "properties" of it, does it show a version tab with for
> instance company info?

Tried that Dick, can't get to it.

>
> If this persists, why not check out HiJackThis, run a full scan, save
> the log, and post it to one of the many security related forums
> (Wilders for instance).
>
> Regards
> Dick

Will do, many thanks.

B.

BrianE wrote:

>
> >
> > Also I 'googled' for the dll, and nothing showed up... Now - with
> > random naming that doesn't have to mean anything - so my question
> > is: Can you access this DLL (Winpatrol should give a path to the
> > file), can you get "properties" of it, does it show a version tab
> > with for instance company info?
>
> Tried that Dick, can't get to it.

You mean it cannot be found? Did you check with a good process viewer
(Sysinternal's for instance) to see whether 'odd' processes were
running?


> >
> > If this persists, why not check out HiJackThis, run a full scan,
> > save the log, and post it to one of the many security related forums
> > (Wilders for instance).
> >
> > Regards
> > Dick
>
> Will do, many thanks.
>
> B.

You're welcome, Brian... and I hope you'll get rid of it very soon!

Regards
Dick

> If this persists, why not check out HiJackThis, run a full scan, save
> the log, and post it to one of the many security related forums
> (Wilders for instance).

> Regards
> Dick

> Will do, many thanks.

Easier way here .

HijackThis log file analysis & repair ( online )
http://hijackthis.de/index.php?langselect=english
Or ,
http://hjt.iamnotageek.com/
HijackThis is a program used by experienced users in order to detect
browser hijackers. It allows you to identify any sort of spyware and
malware (as well as some trojan horses and worms). This is achieved
by scanning special zones of the registry as well as the hard disk
drive, the results being listed in a structured window. Another
feature of HijackThis is the creation of a log file, which can be
saved as a simple text file and opened by any text editor (notepad
as default). Until now, inexperienced users, who could not analyze
the log file by themselves, had no other choice than posting it in a
specialized forum and to hope that a more experienced user takes some
time to analyze it. The script presented on this page is a way to
analyze your log without help from the outside: simply copy/paste
the content of the log file in the textbox below and hit the analyze
button.

* Posted via http://www.sixfiles.com/forum
* Please report abuse to http://xinbox.com/sixfiles