PCTech Forums

First, turn off System Restore.
Then you need to remove "Twain-Tec" in Add/Remove Programs. Twiantec.dll is a transponder. HijackThis will detect it as a BHO but it must not be removed using HijackThis. This is because of the remaining registry entries and files which can be dangerous. Instead the following method of removal is preferable and complete:
Reboot the computer to Safe Mode, search for these files and delete if they are present: mxtarget.dll / mxtarget.ini / twaintech.dll and twaintec.ini If twaintech.dll or mxtarget.dll are in use, then you would need to rename them, reboot the computer, and then delete them.

Now run HiJackThis and do the following if these entrees still exist:

Press Ctrl/Alt/Del and "End Task" or "End Process" on each of the following: (They may or may not be there)

tmthoojf.exe
alchem.exe
Tvm.exe

Turn off System Restore. (Turn it back on after this is repaired and you've rebooted.) Close all other open Windows and have HiJackThis Fix:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = dynhost.inetcam.com;register.inetcam.com
R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - C:\Program Files\TV Media\TvmBho.dll
O2 - BHO: (no name) - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\bxxs5.dll
O2 - BHO: (no name) - {49F7131D-C70C-4D34-ABAD-EC47F78DA83F} - C:\WINDOWS\System32\imeswhare.dll
O3 - Toolbar: (no name) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - (no file)
O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRun
O4 - HKLM\..\Run: [kmynmmgcbur] C:\WINDOWS\System32\tmthoojf.exe
O4 - HKLM\..\Run: [alchem] C:\WINDOWS\alchem.exe
O4 - HKLM\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKCU\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe

Go to Control Panel / Add/Remove Programs and remove the following if they are there:

TV Media

Now delete these Folders or Files that are Highlighted: (You may need enable "Show all Files" and disable "Hide System Files" in Windows Explorer / Tools / Folder Options / View Tab) (You may have to boot to "Safe Mode" in order to delete some Files/Folders)

C:\WINDOWS\bxxs5.dll
C:\WINDOWS\System32\imeswhare.dll
C:\WINDOWS\bxxs5.dll
C:\WINDOWS\System32\tmthoojf.exe
C:\WINDOWS\alchem.exe
C:\Program Files\TV Media

Now, empty all your TEMP Folders (WinXp has up to 4 of them) / Temporary Internet Files Folder and then empty your "Recycle Bin" and reboot.

brad