Probably.....but you need to provide a heck of a lot more details than a
subject line.
HF
> can anyone help?
Are you running *Norton* by any chance?
Harry.
> can anyone help?
Heather - 24 Sep 2005 05:08 GMT
Harry.....*bho* usually means as browser hijacker.....has nothing to do with
running Norton.
To the original poster, wait for morning or go to one of the security ng's
for advice.....and give more details.
Heather
> Are you running *Norton* by any chance?
>
> Harry.
>
>> can anyone help?
David H. Lipman - 24 Sep 2005 13:09 GMT
From: "Heather" <figgs@invalid.nospam>
| Harry.....*bho* usually means as browser hijacker.....has nothing to do with
| running Norton.
[quoted text clipped - 3 lines]
|
| Heather
Actually one may infer the BHO.dll is a Browser Helper Object which is NOT the same as a
Browser HiJacker.

Signature
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
Heather - 24 Sep 2005 16:53 GMT
> From: "Heather" <figgs@invalid.nospam>
>
[quoted text clipped - 10 lines]
> Actually one may infer the BHO.dll is a Browser Helper Object which is >
> NOT the same as a Browser HiJacker.
Thanks.......I realized that after I hit the sack and meant to clarify it.
I had two good ones on the old computer according to BHO Demon.....Spybot
and Acrobat, IIRC. But it certainly was not Norton.
Cheers......Figgs
>can anyone help?
BHO.DLL is a spyware related file so if you have it on your computer
then you have a spyware infestation that needs to be cleaned up.
Go to MVP Jim Eshelman's Spyware Quick Fix page at
http://www.aumha.org/a/quickfix.htm and follow the instructions there
to clean up your machine.
Good luck
Ron Martell Duncan B.C. Canada

Signature
Microsoft MVP
On-Line Help Computer Service
http://onlinehelp.bc.ca
In memory of a dear friend Alex Nichol MVP
http://aumha.org/alex.htm
webster72n - 24 Sep 2005 17:32 GMT
Ron:
BHO.DLL can be traced to *App.Express*, it seems.
That might help narrow down the search.
Harry.
> >can anyone help?
>
[quoted text clipped - 8 lines]
>
> Ron Martell Duncan B.C. Canada
From: "batman" <batman@discussions.microsoft.com>
| can anyone help?
I suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.
BHODemon
http://www.definitivesolutions.com/bhodemon.htm
Use the above first then please download, install and update the following software...
Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
SpyBot Search and Destroy v1.4
http://security.kolla.de/
After the software is updated, I suggest scanning the system in Safe Mode.
To find out MORE information on what BHO.DLL is, please submit a sample of "BHO.DLL" to
Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.
When you get the report, please post back the exact results.

Signature
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
> can anyone help?
Based on the scant details in which you *didn't* provide.
It (may) be this;
<http://securityresponse.symantec.com/avcenter/venc/data/adware.iepagehelper.html>
Though unlikely, you, would be served running HijackThis and posting the log
to an expert Forum for analysis.
<canned reply>
Download and run HijackThis;
(http://aumha.org/downloads/hijackthis.zip)
Read this Tutorial *before* first use;
(http://www.bleepingcomputer.com/forums/index.php?showtutorial=42)
Once done > run HijackThis > save a scan log and post it to /any/ of the
following (expert) forums for analysis.
*Note, registration is required prior to posting a log.
- Not listed in any particular order -
(http://aumha.net/viewforum.php?f=30)
(http://www.bleepingcomputer.com/forums/forum22.html)
(http://www.dslreports.com/forum/security)
(http://castlecops.com/forum67.html)
(http://www.cybertechhelp.com/forums/forumdisplay.php?f=25)
(http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html)
(http://gladiator-antivirus.com/forum/index.php?showforum=170)
(http://forum.iamnotageek.com/f-130.html)
(http://forums.maddoktor2.com/index.php?showforum=17)
(http://www.spywarewarrior.com/viewforum.php?f=5)
(http://forums.spywareinfo.com/index.php?showforum=18)
(http://forums.techguy.org/f54-s.html)
(http://forums.tomcoyote.org/index.php?showforum=27)
(http://forums.subratam.org/index.php?showforum=7)
</end canned reply>
Post back the URL where you posted you log "here" for follow-up.
Silj

Signature
siljaline
MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31
(Reply to group, as return address
is invalid - that we may all benefit)
MowGreen - 25 Sep 2005 04:45 GMT
Nice list of forums, silj ... I'm "borrowing" it. ;)
Mow
>>can anyone help?
>
[quoted text clipped - 32 lines]
>
> Silj
siljaline - 25 Sep 2005 05:26 GMT
Mow wrote:
> Nice list of forums, silj ... I'm "borrowing" it. ;)
You will, eh :-)
Silj

Signature
siljaline
MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31
(Reply to group, as return address
is invalid - that we may all benefit)