Getting TV Media Display or Variant, ClevIEHKR

Discussion in 'Malware Help (A Specialist Will Reply)' started by BennBongae, Feb 27, 2005.

  1. BennBongae

    BennBongae Private E-2

    I'm a first time long time. Hello guys/gals. I think I will need help getting something off my PC. I recently installed etrust Pest Patrol, it is the only tool finding TV Media Display. I can delete TV M. D. from my program files, but as soon as I use IE it comes back. I have gone thru the pest patrol removal inst's for TV M.D. and also a similar sites inst. but can't find any of the files to remove them. Example: Step 1 kill TV Media.exe in the running processes in task manager. Well it isn't there!! Step 2 run thru the registry and delete these files etc. etc. etc. if present ( my problem... "if present") , I couldn't find anything to delete, and this is a problem.
    NAV2002 ,Spy-Bot, AVG, Ad Aware Se, Spyware Blaster are not finding the bug or helping me. I have run all my security today in safe mode, system rest. off, all hidden files are open to the world, I did full scans, of all drives, and I still can't stop TV Media from popping onto my C drive as C:\Program Files\TV media Display|Tvm_Bho.dll

    I understand that TV Media is also similar to CleverIEhooker, Jeired, and is an unknown threat to change your advertising, but may compromise your browsers functions.

    I am fully updated(WINXP) as far as windows update is concerned, I am running a wireless Netgear Router in front of a comcast cable modem.

    Can I post a Hijack this log, or should I?????
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    If you have NOT ran all the steps in the stickies then please do so, If you have completed the steps then procede to posting HJT log. It is very important that you complete ALL the steps in the stickies so that we can better assist you.

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.


    After doing ALL of the above if you still have a problem:

    Make sure you have HijackThis 1.99.1 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, including your web browser and e-mail. Please close these before running Hijack This!

    To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT


    We are very busy here at MajorGeeks.Com PhilliePhan, Chaslang or myself with check back when time permits.!
     
  3. BennBongae

    BennBongae Private E-2

    I have done most of the work required by the stickie posting, I am still getting TV Media in my Prog File. I didn't run some of the last optional cleaners Bitdefender, RavAntivirus, etc. However I am interested in changing my Java prog as reccommended. Is it better to do it manually or use the MSJVM remval tool???
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Make sure you have HijackThis 1.99.1 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, including your web browser and e-mail. Please close these before running Hijack This!

    To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
  5. BennBongae

    BennBongae Private E-2

    Everyone research the TV Media Display. It is tough to remove, I'm seeing alot of complaints on all the PC forums! Read the steps to remove it then disregard what you have read. I got rid of mine and you pros will be happy to hear that I paid an expert to do it. The TV Media Display adware that comes hidden inside pure trash programs that we download, mainly because of ignorance( I am ignorant too so don't get your panties all bunched up) is well hidden in the System32 files and can't be deleted, as simply as all the forum experts would have you do. It is highly likely that the infected hard drive will have to be pulled out of the computer and installed in a bug-free system. My main problem was trying to remove mad.dll from the 32bit system, it would not delete or show itself, something else inside the TVMedia Display folder was clearly protecting mad.dll. I didn't get all the details from the pro I paid to get the bug, but he agreed that it couldn't have been deleted without putting my harddrive into a clean system and the problem was mad.dll, and he is not sure how where it came from or how to prevent it from happening again.

    Moral of the story: Pay a pro to clean your PC before you drive yourself crazy chasing that elusive pest.
     
  6. RayDunne

    RayDunne Corporal

    No thanx, I'd rather fight with it. I find it interesting and a learning experience. I'd rather make a donation to these guys or the freeware vendors and then go to work on it myself. But that's just me, besides, I have access to other pc's and am perfectly comfortable doing what your "expert" did and I don't claim to be one, yet! Anyway, everyone has their own opinions, and here's mine :rolleyes:
     
  7. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Good Luck!
     
  8. BennBongae

    BennBongae Private E-2

    I wasn't using my PC to surf anymore! I was obssessed :mad: with removing this bug, and it was time to move on. If the end result was needing to pull the hardrive out to delete some infections, then I would have never been able to do that, as I only have one PC. I was glad to find out that my PC was basically free of infection, except the TV Media spyware, and that it was a tough removal, even for a professional software repairman. Life is short, and you have to pick your battles wisely or you will never get anything accomplished.
    Ben..( :) happily running an un-infected PC for the first time in two years :) )
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds