geebb.dll problem

The Munster · 02-16-08, 03:04 AM

Keep getting a pop-up and having a problem getting shot of it ...

Scotty the Windows Watchdog is on patrol and has detected a new Internet Explorer Add-On has been installed on your system.
Do you approve the addition of this IE Helper ?
Press YES if this Internet Explorer Add-On is allowed.

geebb.dll
C:/WINDOWS/system32/geebb.dll

Tried Spybot, Scotty and System Restore to remove it and it still returns and pops up with annoying regularity.
Anybody know how I can rid this out of my system ?

Stealth Hunter · 02-16-08, 04:07 AM

Ye be infected with the same **** I had last month! Huge .DLL assault on January 17th or the 18th (can't remember) that sent out toolbar additions to systems and spammed desktop pop-ups with a ton of crap about "SPYWARE DETECTED!" or "VIRUS DETECTED!" to try and get the infected user to buy various products. There's got to be some way that it's illegal to do that.

Either way, just search for the file, and remove it. Scan your system with something called Prevx CSI. If it finds any bad .DLL files, then remove them manually (or buy their product; I removed mine manually).

Oh, and if GEEBB.DLL has a message appear with "Access Denied", just use a program called Unlocker to remove it (right click, hit unlock, and you're done; just hit the delete key and you're gone). If it says no lock was returned on the file, then use the Unlocker delete button and it will be gone once you start your system again. Problem should be solved.

sonar732 · 02-16-08, 12:06 PM

Take a look here for ways to find out if your system has been hijacked.

The Munster · 02-16-08, 01:20 PM

@ Stealth Hunter .. yeah, I'm now getting a dose of 'iffy' pop-ups asking if I have the symptons they describe and trying to get me to click the yes box [a lot of them are pretty agressive too] and they will 'fix' it.

@ sonar732 .. thanks for the link, a lot of food for thought there and will endeveaour to return the Computer back to normal [whatever that is !]

Also 700 odd 'TMP' [?] files have appeared in 'My Documents' that I can't move or delete = Very Worrying

sonar732 · 02-16-08, 03:13 PM

I would post your HijackThis report here so that we can see what type of spy/malware programs are taking control. My thought is that you have a browser hijack going on.

Stealth Hunter · 02-16-08, 04:47 PM

Quote:

Originally Posted by sonar732

I would post your HijackThis report here so that we can see what type of spy/malware programs are taking control. My thought is that you have a browser hijack going on.

http://www.google.com/search?sourcei...H:en&q=egodktf

That's the infection I had. Pretty simple to remove, though you must make sure you nail every bad/malicious .dll file.

02-16-08, 03:04 AM	#1
The Munster Ace of the Deep Join Date: Jul 2006 Location: Deepest Dumbria Posts: 1,243 Downloads: 2 Uploads: 0	geebb.dll problem Keep getting a pop-up and having a problem getting shot of it ... Scotty the Windows Watchdog is on patrol and has detected a new Internet Explorer Add-On has been installed on your system. Do you approve the addition of this IE Helper ? Press YES if this Internet Explorer Add-On is allowed. geebb.dll C:/WINDOWS/system32/geebb.dll Tried Spybot, Scotty and System Restore to remove it and it still returns and pops up with annoying regularity. Anybody know how I can rid this out of my system ? __________________ *GWX Team Member; Retired* GWX Home Page

02-16-08, 01:20 PM	#4
The Munster Ace of the Deep Join Date: Jul 2006 Location: Deepest Dumbria Posts: 1,243 Downloads: 2 Uploads: 0	@ Stealth Hunter .. yeah, I'm now getting a dose of 'iffy' pop-ups asking if I have the symptons they describe and trying to get me to click the yes box [a lot of them are pretty agressive too] and they will 'fix' it. @ sonar732 .. thanks for the link, a lot of food for thought there and will endeveaour to return the Computer back to normal [whatever that is !] Also 700 odd 'TMP' [?] files have appeared in 'My Documents' that I can't move or delete = Very Worrying __________________ *GWX Team Member; Retired* GWX Home Page

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

02-16-08, 04:07 AM	#2
Stealth Hunter Silent Hunter Join Date: Nov 2006 Location: Y'ha-Nthlei Posts: 4,262 Downloads: 19 Uploads: 0	Ye be infected with the same **** I had last month! Huge .DLL assault on January 17th or the 18th (can't remember) that sent out toolbar additions to systems and spammed desktop pop-ups with a ton of crap about "SPYWARE DETECTED!" or "VIRUS DETECTED!" to try and get the infected user to buy various products. There's got to be some way that it's illegal to do that. Either way, just search for the file, and remove it. Scan your system with something called Prevx CSI. If it finds any bad .DLL files, then remove them manually (or buy their product; I removed mine manually). Oh, and if GEEBB.DLL has a message appear with "Access Denied", just use a program called Unlocker to remove it (right click, hit unlock, and you're done; just hit the delete key and you're gone). If it says no lock was returned on the file, then use the Unlocker delete button and it will be gone once you start your system again. Problem should be solved.

02-16-08, 12:06 PM	#3
sonar732 The Old Man Join Date: Jul 2003 Location: Central MO Posts: 1,562 Downloads: 6 Uploads: 0	Take a look here for ways to find out if your system has been hijacked.

02-16-08, 03:13 PM	#5
sonar732 The Old Man Join Date: Jul 2003 Location: Central MO Posts: 1,562 Downloads: 6 Uploads: 0	I would post your HijackThis report here so that we can see what type of spy/malware programs are taking control. My thought is that you have a browser hijack going on.