Prev: PCShowBuzz
Next: TROJAN-Need Help
From: Alex Cowley on 21 Jan 2006 23:31
Found the problem .... it's "Creative Filter AudioControlMB Module"
(ctmbha.dll, version 1.0.1.22).

Not sure exactly what the process does (other than litter my hard drive with
junk) so have disabled the process for the time being using AutoRuns from
SysInternals.




"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:Ighyf.693$h47.193(a)trnddc08...
> From: "SBC" <NoSpam(a)hotmail.com>
>
>
> | Thank you for your thoughts.
> |
> | Yes, I am running the Dell Support Agent. But, unfortunately,
> CLCLEAN.0001
> | still appears in Windows task manager, even after I disbale it.
> |
> | The files that are in each and every version of the sub-directory
> | C:\Documents and Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn
> | are:-
> |
> | ApiExShell.dll
> | ActivationGui.dll
> | Ky5s96SF.csa
> | PfdRun.pfd
> | ~de1785.tmp
> | ~df394b.tmp
> | ~efe2.tmp
> |
> | The product name for for the two dll files is "Sound Blaster Audigy
> ADVANCED
> | MB", the company is "Creative Technology Ltd." and the description is
> | "Activation Manager for Driver Activation (Montgomery 2 - Dangerfield)"
> and
> | "Activation GUI for Driver Activation (Montgomery 2 - Dangerfield)",
> resp.
> |
> | I thus disabled all the Creative start up programs as well as all the
> | Creative services. This didn't help, either, CLCLEAN.0001 still appears
> in
> | Windows task manager.
> |
>
> Use the Sysinternal FileMon utility
> http://www.sysinternals.com/Utilities/Filemon.html
> and monitor the file activity to determine the causitive factor.
>
> Since the file processes are created in the "Alex" profile TEMP folder you
> can assume it is
> being loaded by the Alex profile or it was installed by the user Alex.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>


First  |  Prev  | 
Pages: 1 2
Prev: PCShowBuzz
Next: TROJAN-Need Help