AnimeSuki Forums

LIQUIDCELL · 2004-06-19, 16:48

I've tried to delete the damn thing manually---over and over again---cleaned the registry but it still keeps coming back. Everytime I click the 'home' button' on my IE browser---I even tried to put on a new home add. over again---and again -----it just keeps on appearing! aaaah!

What the hell is this damn file? Need your expertise ppl.

Thnx.

Sincerely,

Kirsten

Ending · 2004-06-19, 17:00

Either it is:

a) a system file protected by the OS, or
b) malware, in which case you should try typing that same to Google and/or trying AVS/Malware remove-tool.

Hopefully you have your "internet condom" on -firewall?

_Sin_ · 2004-06-19, 17:07

Quote:

Originally Posted by Wirhe

Either it is:

a) a system file protected by the OS, or
b) malware, in which case you should try typing that same to Google and/or trying AVS/Malware remove-tool.

Hopefully you have your "internet condom" on -firewall?

I already did a google search - with no success °_°

LIQUIDCELL, since you did not provide that much info, I'll give you some general advice:

Download Spybot, update it via the - duh - update function, do a scan and remove possible Spyware. Restart and see if the problem remains. If it does, download HijackThis! and post the report in spoiler tags in this thread.

LIQUIDCELL · 2004-06-19, 20:48

Thanx u both. But it's not working....

The following requires password to view:

Spoiler:

_Sin_ · 2004-06-19, 20:51

Quote:

Originally Posted by LIQUIDCELL

Thanx u both. But it's not working....

The following requires password to view:

Spoiler:

Check these entries and "Fix checked".

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS1\axpwt.dll/sp.html#37049
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://axpwt.dll/index.html#37049
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://axpwt.dll/index.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS1\axpwt.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://axpwt.dll/index.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS1\axpwt.dll/sp.html#37049

LIQUIDCELL · 2004-06-19, 21:07

I did! I exited that prog and opened it-- then run scan--- that damn freaking file appears again!

I give up..... for the meantime. Going out & drink some tequila.
Laterz.

Oh yeah, is it bad to leave your pc overnight? I'm downloading some 2++ gb movie file.... Maybe this was where it all started.... ooe?

_Sin_ · 2004-06-19, 21:14

Quote:

Originally Posted by LIQUIDCELL

I did! I exited that prog and opened it-- then run scan--- that damn freaking file appears again!

I give up..... for the meantime. Going out & drink some tequila.
Laterz.

You already removed these entries? Hmm, then you should disable System Restore, remove the entries again, reboot and activate System Restore. Note that all System Restore points will be deleted at that moment and you should set a System Restore point manually later on, so do this only if you know what you are doing.

Quote:

Originally Posted by LIQUIDCELL

Oh yeah, is it bad to leave your pc overnight? I'm downloading some 2++ gb movie file.... Maybe this was where it all started.... ooe?

No problem if you got a decent and uptodate (!) Antivirus program + Firewall.

Ending · 2004-06-20, 08:11

Too much hassle; just format and see if it is still there. If so, obviously it must be a protected OS file.

KiNG · 2004-06-20, 08:34

There are some more items in your HijackThis log that should be fixed. Besides that, it's not your full log, make a new log and paste here all of it.

By the way, you should also check out SpySweeper.

Shadowlord · 2004-06-20, 14:09

disable system restore, reboot into safe mode under administrative privalleges, and then try to manually delete it. If it works, remember to re-enable system restore. If it doesn't, i'm out of ideas.

LIQUIDCELL · 2004-06-20, 18:31

I did disable sysre and rebooted---it worked. But then another error came up.

Diagnosis: IE is infected.

Cannot believe my poor baby was suffering from eTD (electronic trasmitted disease)

Thank you all for your help. Greatly appreaciated it.

~Kirsten

KiNG · 2004-06-21, 09:27

Then why wouldn't you post a new HijackThis log? Also, did you check out SpySweeper? Don't get confused by the name, it is even better than Ad-aware & Spybot.

Dopeskills · 2004-06-21, 13:23

Maybe it would be easier to just stop using Internet Explorer .

KiNG · 2004-06-21, 13:53

Quote:

Originally Posted by Dopeskills

Maybe it would be easier to just stop using Internet Explorer .

I second that. Me is also using Mozilla Firefox

.

_Sin_ · 2004-06-21, 16:38

I'm still using Internet Explorer because I'm too lazy to change ^_^''. Keeping IE is no problem if you know what you are doing but I consider changing to Firefox if the compatabilities are good. So, are they?

KeinikuSuki · 2004-06-21, 17:07

Quote:

Originally Posted by KiNG

I second that. Me is also using Mozilla Firefox

.

Although in theory the thought of a better browser is nice, but the sad reality is that in practice it takes too long to load to be worth the trouble. Just get Service Pack 2 for XP and go on with life.

Anyway, the easy way to fix the problem is Start Windows in Safe Mode (by mashing the F8 key at start up). At the dialog box click OK to continue start up and skip the Recovery Console.

From the desktop run HijackThis! While the program is running, open the task manager (Ctrl+Shift+Esc) and end prossess on explorer.exe and iexplore.exe.

Now click the scan button and put a check mark next to the afformentioned items. Make absolutly sure, nothing else is running, ESPECIALLY INTERNET EXPLORER!

Click Fix Checked, and restart normally.

KiNG · 2004-06-21, 18:44

Too long to load? Do you mean the application itself or Web pages? Anyhow, Mozilla Firefox is still better, it may be only an opinion and not a fact, but it's not only me sticking to that opinion, which should mean something

.

P.S
Pardon my rudeness, but it should be 'aforementioned', isn't it?

KeinikuSuki · 2004-06-21, 19:11

Quote:

Originally Posted by KiNG

Too long to load? Do you mean the application itself or Web pages? Anyhow, Mozilla Firefox is still better, it may be only an opinion and not a fact, but it's not only me sticking to that opinion, which should mean something

Too long to load as in when the program isnt loaded and you want to open a web browser. You have to sit there and wait for 30 minutes for it to go through all those initialization steps. I know there is a program that stays open, but it seems unsettling that you have you have a 6,000 kb prossess going all the time just so you can have a web browser open in a reasonable amount of time.

PS:
Pardon my rudeness, but I think there may be something wrong with you if you feel you need to correct my spelling mistakes.

KiNG · 2004-06-21, 21:17

I don't know, it works fine for me though...

P.S
It's not that there is really something wrong with me, I just have this obsession to correct other people's spelling mistakes, that's why I first started with 'pardon', so I will not be extremly rude. Forgive me if I was.

Dopeskills · 2004-06-21, 22:20

Any ideas where exatcly the dll came from?

KeinikuSuki: Mozilla loads slow, but Firefox loads about as fast as IE.

2004-06-19, 16:48	Link #1
LIQUIDCELL Member Join Date: Nov 2003 Location: N49°18.1013' W122°57.5639'	HELP RID axpwt.dll I've tried to delete the damn thing manually---over and over again---cleaned the registry but it still keeps coming back. Everytime I click the 'home' button' on my IE browser---I even tried to put on a new home add. over again---and again -----it just keeps on appearing! aaaah! What the hell is this damn file? Need your expertise ppl. Thnx. Sincerely, Kirsten

2004-06-19, 20:48	Link #4
LIQUIDCELL Member Join Date: Nov 2003 Location: N49°18.1013' W122°57.5639'	Thanx u both. But it's not working.... The following requires password to view: Spoiler: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS1\axpwt.dll/sp.html#37049 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://axpwt.dll/index.html#37049 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://axpwt.dll/index.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS1\axpwt.dll/sp.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://axpwt.dll/index.html#37049 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS1\axpwt.dll/sp.html#37049 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: (no name) - {10064CAE-0AB0-D77B-525D-A5D1F4DB27B3} - C:\WINDOWS1\addsy32.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS1\System32\msdxm.ocx O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS1\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunOnce: [apisd.exe] C:\WINDOWS1\apisd.exe O4 - HKLM\..\RunOnce: [apiqb.exe] C:\WINDOWS1\system32\apiqb.exe O4 - HKLM\..\RunOnce: [ntyn32.exe] C:\WINDOWS1\system32\ntyn32.exe O4 - HKLM\..\RunOnce: [mfcnx.exe] C:\WINDOWS1\mfcnx.exe O4 - HKLM\..\RunOnce: [atlsu.exe] C:\WINDOWS1\system32\atlsu.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...dir702d140.cab O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} - O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/SassCln.CAB O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab

2004-06-20, 08:34	Link #9
KiNG Senior Member Join Date: Apr 2004	There are some more items in your HijackThis log that should be fixed. Besides that, it's not your full log, make a new log and paste here all of it. By the way, you should also check out SpySweeper. Last edited by KiNG; 2004-06-20 at 08:48.

2004-06-19, 17:00	Link #2
Ending Senior Member Join Date: May 2004	Either it is: a) a system file protected by the OS, or b) malware, in which case you should try typing that same to Google and/or trying AVS/Malware remove-tool. Hopefully you have your "internet condom" on -firewall?

2004-06-19, 21:07	Link #6
LIQUIDCELL Member Join Date: Nov 2003 Location: N49°18.1013' W122°57.5639'	I did! I exited that prog and opened it-- then run scan--- that damn freaking file appears again! I give up..... for the meantime. Going out & drink some tequila. Laterz. Oh yeah, is it bad to leave your pc overnight? I'm downloading some 2++ gb movie file.... Maybe this was where it all started.... ooe?

2004-06-20, 08:11	Link #8
Ending Senior Member Join Date: May 2004	Too much hassle; just format and see if it is still there. If so, obviously it must be a protected OS file.

2004-06-20, 14:09	Link #10
Shadowlord ~DESU Join Date: Feb 2004 Location: Vancouver, Canada eh? Age: 37	disable system restore, reboot into safe mode under administrative privalleges, and then try to manually delete it. If it works, remember to re-enable system restore. If it doesn't, i'm out of ideas.

2004-06-20, 18:31	Link #11
LIQUIDCELL Member Join Date: Nov 2003 Location: N49°18.1013' W122°57.5639'	I did disable sysre and rebooted---it worked. But then another error came up. Diagnosis: IE is infected. Cannot believe my poor baby was suffering from eTD (electronic trasmitted disease) Thank you all for your help. Greatly appreaciated it. ~Kirsten

2004-06-21, 09:27	Link #12
KiNG Senior Member Join Date: Apr 2004	Then why wouldn't you post a new HijackThis log? Also, did you check out SpySweeper? Don't get confused by the name, it is even better than Ad-aware & Spybot.

2004-06-21, 13:23	Link #13
Dopeskills Thigh Master Join Date: Jun 2003 Location: New Jersey, USA Age: 42	Maybe it would be easier to just stop using Internet Explorer .

2004-06-21, 16:38	Link #15
_Sin_ Member of the Year 2004! Join Date: Apr 2004 Location: "And if thou doest not well, _Sin_ lieth at the door."- Genesis 4:7 Age: 39	I'm still using Internet Explorer because I'm too lazy to change ^_^''. Keeping IE is no problem if you know what you are doing but I consider changing to Firefox if the compatabilities are good. So, are they?

2004-06-21, 18:44	Link #17
KiNG Senior Member Join Date: Apr 2004	Too long to load? Do you mean the application itself or Web pages? Anyhow, Mozilla Firefox is still better, it may be only an opinion and not a fact, but it's not only me sticking to that opinion, which should mean something . P.S Pardon my rudeness, but it should be 'aforementioned', isn't it?

2004-06-21, 21:17	Link #19
KiNG Senior Member Join Date: Apr 2004	I don't know, it works fine for me though... P.S It's not that there is really something wrong with me, I just have this obsession to correct other people's spelling mistakes, that's why I first started with 'pardon', so I will not be extremly rude. Forgive me if I was.

2004-06-21, 22:20	Link #20
Dopeskills Thigh Master Join Date: Jun 2003 Location: New Jersey, USA Age: 42	Any ideas where exatcly the dll came from? KeinikuSuki: Mozilla loads slow, but Firefox loads about as fast as IE.