Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Recurring Sys/WOw64 with Different Dlls


  • Please log in to reply

#1
pincus10009

pincus10009

    New Member

  • Member
  • Pip
  • 2 posts

Every time I run CCleaner on the Registry other than the same day, some version of Wow64 shows up. I have scanned for viruses and malware using Norton Security Suite, Norton Power Erasure, Microsoft Malicious Software Tool, Malwarebytes Anti-Malware, Spybot - Search & Destroy 2, and have additional protection with Spyware Blaster and found nothing. Yet some version of Wow64 always reappears after a CCleaner scan and deletion of the file. I tried to look it up on Goggle and get no document found. Are the versions that I copied and saved as text before I deleted them a virus?

 

 

 

ActiveX/COM Issue                                        InProcServer32\%SystemRoot%\SysWow64\cecnazzzddoi.dl

HKCR\CLSID\{BB6D44FF-00D0-6B1D-50CB-47CBA4B253C5}

 

ActiveX/COM Issue                                        InProcServer32\%SystemRoot%\SysWow64\vmwrba.dll    

HKCR\CLSID\{BB6D44FF-00D0-6B1D-50CB-47CBA4B253C5}


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,026 posts
  • MVP

I'm not a big fan off CCleaner but let's look at your system and see if there is something suspicious:

 

 
Download : ADWCleaner to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer
 
NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.
 
Close  all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).
 
scan-results.jpg
 
Click on Scan  and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.
 
The report will be saved in the C:\AdwCleaner folder.
 
 
 
Junkware-Removal-Tool
 
Please download Junkware Removal Tool to your desktop.  Make sure you get the correct Download button.  Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site
  • Pause your anti-virus.  Close all browsers.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
  •  
     
     
    •  
     
  • Get FRST from
  • You need to download the appropriate tool for your PC.  If you don't know if you have a 32 or 64 bit system get them both.  Only one will work and that's the right one.
     
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer. 
  • Check the Addition.txt box
  • Press Scan button. 
  • It will produce a log called FRST.txt in the same directory the tool is run from.  
  • Please copy and paste log back here. 
  • It will generate another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply. 

    • 0

    #3
    pincus10009

    pincus10009

      New Member

    • Topic Starter
    • Member
    • Pip
    • 2 posts

    I am sorry for not answering sooner. I decided to use Q Malware Removal forum.

     

    Thank You!


    • 0






    Similar Topics

    0 user(s) are reading this topic

    0 members, 0 guests, 0 anonymous users

    As Featured On:

    Microsoft Yahoo BBC MSN PC Magazine Washington Post HP