Re: helper.sig folder on bootup



Missed the 2nd registry entry exported and deleted. Here it is:

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}\1.0]
@="main 1.0 Type Library"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}\1.0\0]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}\1.0\0\win32]
@="C:\\Program Files\\Common\\_helper.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}\1.0\FLAGS]
@="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8E3C68CD-
F500-4A2A-8CB9-132BB38C3573}\1.0\HELPDIR]
@="C:\\Program Files\\Common\\"





GaryD wrote:
No one seems to know where it comes from, but here is how I fixed it:

Search the registry for 'helper.sig', you'll probably find two entries
that reference that name in folder Common. Export the entries (just
in case) then delete the keys.

Here are the entries I exported and deleted: Perhaps someone can shed
light on the source:
#1
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}]
@="Browser Helper Object"
"AppID"="{A0E1054B-01EE-4D57-A059-4D99F339709F}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}\InprocServer32]
@="C:\\Program Files\\Common\\_helper.dll"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}\ProgID]
@="main.BHO.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}\Programmable]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}\TypeLib]
@="{8E3C68CD-F500-4A2A-8CB9-132BB38C3573}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-
FBE00A6C5486}\VersionIndependentProgID]
@="main.BHO"





Also delete the Common folder if the "helper" files are probably ther
only ones there. If there are other items there, your case is not
like mine.

Those two steps fixed the problem for me.


Ol�rin wrote:
"jerms" <jerms@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D3E35FF3-B7ED-4AE7-9955-FBAB3CBA766D@xxxxxxxxxxxxxxxx
i get the eact same thing. i'm not sure why it does it or how to fix.

"PinzPilot" wrote:

For the past few days, when I boot up my computer, I get a folder called
"Common" with the files helper.sig and helper.dll When I run
msconfig.exe,
startup tab shows these to be associated with Microsoft Office. Nothing
I
have tried so far has fixed this. No viruses detected, no spyware
detected,
etc. I have no idea what has caused this to start happening. Can
someone
please tell me if they are experiencing this same problem and what can be
done to fix it? Thanks

Well I just plugged those filenames into Google and got a ton of hits. What
research did *you* do?

It looks like you need to scour your system for malware / adware / spyware.
What protection from/detection for that do you have in place? One forum
poster suggests that these might get into systems via Facebook allowing ads
and installing adware.

PS The "shift" key allows capital letters when typing, eg for the beginning
of sentences.
.



Relevant Pages

  • Re: helper.sig folder on bootup
    ... you'll probably find two entries ... Also delete the Common folder if the "helper" files are probably ther ... It looks like you need to scour your system for malware / adware / spyware. ... and installing adware. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: A little help please...
    ... already used to rid my system of this spyware once and for all. ... very decent scan) which found maybe 20 entries and deleted. ... How do I get rid of this software? ... Run HijackThis and post your log to one of the following forums (not ...
    (microsoft.public.windowsxp.security_admin)
  • RE: E2G, Apropos media, QoolAid, iebhos.dll
    ... Deleting these keys would normally fix the problem. ... entries in CLSID which is where active X controls are referenced. ... spyware removal tool like Spyware Doctor or even the Microsoft tool. ... >> can limit the number of infections to 6, which Spyware Doctor can then clean. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: spam links added to my favorites!?!?
    ... If you know nothing about spyware go here and read as much as you ... Be warned that Ad Aware had a problem removing NewDotNet, Common Name ... Toolbar and webhancer 3000, it will also kill your internet connection. ... > constantly added to my favorites folder and desktop. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: A little help please...
    ... viruses, spyware, malware, adware etc... ... very decent scan) which found maybe 20 entries and deleted. ... 30 viruses and over 50 possible spyware, ... Run HijackThis and post your log to one of the following forums (not ...
    (microsoft.public.windowsxp.security_admin)