• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Should I let this program run?

Oifish

Oifish

Senior member
Kerio Personal Firewall is telling me that hp72F4.tmp is trying to run DXOLE32.exe. Should I let this run or is this a security threat?
 
Yea i tried that too, with no results. So i think i might deleted it. My roomate did a search for those files on his PC and they didn't show up, so..... DELETED
 
Well, I deleted these files and about 2 hours later the same thing popped up. Hmmm. I really dont want to let it run this program because I don't know what it is.

Hmm it seems like this only happens after Windows Media Player is open. And if I hit deny, it says the hpe71d is trying to run cmd.exe. Now I know that cmd.exe is legit, but mabye it will try to run a .bat file or something from there.
 
No, I don't even own one. I use a flashdrive and use the university's printers. I searched for dxole32 in regedit and it comes up with it in: HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603

Is that the legit Search Assistant, or is that the spyware. Because this is located in C:\windows\srchasst\
 
Originally posted by: Oifish
No, I don't even own one. I use a flashdrive and use the university's printers. I searched for dxole32 in regedit and it comes up with it in: HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5603

Is that the legit Search Assistant, or is that the spyware. Because this is located in C:\windows\srchasst\
Click to expand...

Sounds like spyware to me..
 
Oh, I have. I normally use Spybot, and Adaware, and HijackThis. Using Hijack this I found that hp72F4.tmp ia overwriting my Internet Exploer's homepage to some site that is "blocked" and you need to download the "anti-spyware" program to view it. The website it sends me to is http://updatecenter.com (ha ha ha nice try). But when I deleted that using hijackthis it still comes back. I use FireFox so I never noticed that before.
 
Alright it worked, that junk is gone. But now my desktop has the Windows ME look to it. I tried to change it back but it looks like the XP style is erased??? Should I just reinstall windows?
 
I ran that, and it did not find anything wrong. I just think the XP theme got erased somehow. Is there a place that I can download this from?
 
I just copied the windows/resource/themes folder from my roomie's pc to mine and now it works fine, but some of the other looks are pretty intnense... Thanks for all your help guys.
 
Well crap, this thing keeps popping up. I go through all the steps to delete it in safe mode like that link told me and still, Kerio is telling me that hp72F4.tmp is trying to run DXOLE32.exe. ARGH, there is something out there that keeps creating this program. Spybot, adaware, hijackthis, AntiVir, Mcafee, they all don't find what ever this stupid thing is.
Please Help!!!
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top