Dymanet - help 2

breckrider · Joined: Feb 17, 2004 Posts: 103

I'm suddenly getting popup windows saying "Brought to you by Dymanet." At one point, it had changed my homepage. I've run AVG 9, Trendmicro online scanner, BitDefender online scanner and Spybot. None of them have found anything.

Any ideas what this is or how to get rid of it?

drwho07 · Joined: Nov 29, 2007 Posts: 2238 Location: Central FL, USA

As is often the case, Google is your best friend.

I googled Dymanet and in one of the resultant forums I found this answer.

Hey I had the same problem with dymanet pop ups, so I asked one of my best friends, Mike 'the most awesome tech guy ever' about it.
He said if my spybot didn't take care of it (which it hadn't) that I needed to go to my internet options from the control panel.
Get ready for detailed instructions; from the intrnet explorer click the advanced tab upper right.
I should mention I have xp-professional and no experience with vista.
From advanced tab click Manage add-ons where you will find a list of 'bho-s' or browser helper objects, my list includes things like my avg protective software and adobe helper.
YOu will see the dymanet and whatever other cookies are working on your browser and aren't supposed to be there listed and also enabled.
I suggest if you're on a cleaning spree to google whatever you're about to
disable and make sure its not vital. BEFORE I disabled dymanet I selected the entry and right clicked it showing a drop down list from which I selected more information.
From more information I hit copy and pasted the below entry into a note pad because it showed where the malware was and its file name making it possible to delete the 'effing' thing permanently.
I did this with whatever other kind of cookie and undesired program was running in the add-on list. If this doesn't work for you I'm truly sorry, I've only just done this so I haven't had a significant amount of time to make sure it worked, but it seems the right thing to do.
And... if anything I've just educated everyone on where your add-ons are and how to disable and find their files in your computer.

Good Luck with pop-ups, cheers- Christina.

Name: dymanet
Publisher: Control name is not available
Type: Browser Helper Object
Version: 4.6.5.9
File date:
Date last accessed: Today, October 27, 2009, 2 hours ago
Class ID: {7E0955CD-6DF5-E2C2-A155-E1D5519BEDFC}
Use count: 72
Block count: 0
File: d2f12a8f-23f6-4bac-7aeb-1cdb2ab31063.dll
Folder: C:\WINDOWS\system32

Good Luck
The Doctor Cool

breckrider · Joined: Feb 17, 2004 Posts: 103

Wow, thanks. I couldn't find any good information about it. I've gone in Internet explorer and disabled it but can't find the actual file in C:/Windows/System32 to delete it. We'll see if it pops up again.

breckrider · Joined: Feb 17, 2004 Posts: 103

I thought I had it fixed but it's happening in firefox. I've had two popups and one change of page which firefox blocked. When I went back in IE, I went to the manage add ons and found the add on that you said to disable. When I got more information about it it the file name had changed. I found that on in system32 and deleted it.

Raydeo · Joined: Jun 23, 2005 Posts: 55 Location: Boring, Oregon

Have you tried doing a scan with HijackThis ?

I've had issues that only HijackThis could fix for me .

Justa thought ,and GoodLuck

greyknight17 · Joined: Feb 03, 2003 Posts: 5924 Location: Brooklyn, NY

Please read this topic and follow the steps outlined. When ready, post your HijackThis log here.

Also run the following tool:

Go to http://www.bleepingcomputer.com/combofix/how-to-use-combofix and follow the instructions on how to install the Recovery Console and run ComboFix. Go through all the steps until posting the log part. Post the combofix log here.

woosnamc · Joined: Feb 26, 2010 Posts: 3

Well I have had Dymanet popups even after being told to install PCTOOLS to get rid of. I have been told that they were releasing a update that would eliminate or fix the problem. As of today and 2 major updates to PCTOOLS database I still get Dymanet popups offering to sell me even PCTOOLS at a discount. I have searched dymanet with Copernic and found that the host is GoDaddy. Does this mean PCTOOLS who also hosted by GoDaddy is in cahoots with Dymanet? This affects my FireFox and IE 8. I have done full scans and nothing. I have taken out the long alpha-numeric string dlls in system32 directory. I have searched Registry for any occurence. I have search all my drives extensively for any mention of dymanet string and Nothing. Latest Chat with PCTOOLS support says.."Gee your version of PCTOOLS is too old" Yet every Chat (5) previously said You have the latest, just wait for the Update we are working on. It will be out in 24hrs. Yet here it is 3 days later and nothing.

greyknight17 · Joined: Feb 03, 2003 Posts: 5924 Location: Brooklyn, NY

woosnamc, welcome to Lockergnome.

When are these popups showing up? Dymanet is an advertising company, so they may just be advertising PCTools. Didn't look into this but it doesn't matter if they are both using the same webhost or registrar. One is a advertising company while the other sells software. It's like Google Ads advertising other software...same concept. Only difference is if Dymanet is showing popups for no reason (unless you are visiting a particular site that displays these ads by default), then there is a problem.

If you still need help, please read the sticky topic and open up a new topic to post the logs requested.

woosnamc · Joined: Feb 26, 2010 Posts: 3

This Dymanet popup problem is a lot worse than simply a popup ad. By noting the pages that pop up, I found they are Topic sensitive to the Search parameters I am putting in Bing or Google search bar at the top. This means they are monitoring Keystrokes which is a Flagarant Violation of Security and my rights. I have had total frustration talking with support at PcTools and all their Scanning only removes apparently the competition not their connection to Dymanent. I was hoping someone here would give me the shortcut to removing this Threat. I have switched browsers only to find it still coming up. It also seems to now hijack web pages with Java banners, substituting their banner. I tell the browser to reload, and the right banner comes up.

Come on guys certainly one of you is bright enough to have found the trick to get rid of this?

greyknight17 · Joined: Feb 03, 2003 Posts: 5924 Location: Brooklyn, NY

woosnamc, open up a new topic after reading the sticky topic. Post the HijackThis log as and also a ComboFix log in your new topic...

Go to http://www.bleepingcomputer.com/combofix/how-to-use-combofix and follow the instructions on how to install the Recovery Console and run ComboFix. Go through all the steps until posting the log part. Post the combofix log here.

woosnamc · Joined: Feb 26, 2010 Posts: 3

greyknight you don't seem to get the point that this hijacking, at least the suggestion from one user to use Revo uninstaller worked partially. Now if I can stop it from returning I will be clear. Thanks so far guys. Lets rid the world of this kind of CRAP.

greyknight17 · Joined: Feb 03, 2003 Posts: 5924 Location: Brooklyn, NY

There is nothing to discuss here. If you know of a way to remove it, feel free to post your possible solution. If you want to request help, then follow the instructions I mentioned.

I agree. We need to get rid of these malware and it's unfortunate that there are scums out there who make others miserable just to make money.

Malware infections are always changing/mutating, so they may be more difficult to remove as they are constantly changing and removing something may spawn new infections...

@breckrider, I'm not sure if you still need assistance at this point since you haven't posted back for a while. If you still need help, feel free to open up a new topic.

This topic will be locked.