tvmedia.tvmbho

[ei8ball]

Never have I found such a difficult spyware to remove from a pc. This little devil is a browser hijacker and I have successfully removed every trace of it, but then after rebooting it repopulates this info...

'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, 'TV Media'

Which I delete, but it always returns and I can't figure out which process/service it repopulating it...

Any ideas out there?

Thanks in advance,

Jason


You were born an original. Don't die a copy!

 

[diogenes10]

Get Hijackthis and try

Boot to safe mode.
Process manager [ctl-alt-del] look for tvm.exe, stop it if running.


Run hijackthis, fix lines like this (may be more or less):
R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - C:\Program Files\TV Media\TvmBho.dll
O4 - HKLM\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKCU\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe

Delete folder
C:\Program Files\TV Media

Reboot normally.

See also frenemy comment in this thread:

http://computercops.biz/postt65218.html

Usually tvmedia has other problems with it so you'll want to review the hjt log for other suspicious items.

-------------------------------------
It's 10 O'Clock ( somewhere! ).
Are your registry and data backed up?

 

[cmeagan656]

If you're using ME or XP you need to disable system restore before removing it. After you're done, reboot and re-enable system restore.

Cheers.

 

[ftechguy]

Just bumping an old thread for anybody else who might have to deal with the TV media spyware: MS released their own tool to zap it.

http://www.microsoft.com/downloads/...27-B656-45CD-9668-73134A18231B&displaylang=en

Apparently, it interferes with Windows XP SP2 installation