I recently installed Prevx1 after it was recommended to me by a friend and after scanning my XP Home Edition PC it told me I had an infection. It didn't offer any cream or lotions to clear up the infection, nor did it allow me to clear the infection from my PC.

As a newbie to the Castle Cops family, I have read about Free Licenses for Prevx1 being won, granted or gifted by/to CC members but have no idea about how I can claim one for myself... Can anyone please help?

Many, many thanks in advance!

The Castle Cops 5 year Contest is over so if you did not enter and win then you can not claim one.

Thanks for the reply, hewee.

I realise that the allocation of free licenses by CastleCops has ended but wondered if anybody knew of any other sites that may allocate free licenses at the moment??

It appears that I now have TWO infections that are described, with their locations, as follows:

AWVTS.DLL file located at C:\WINDOWS\SYSTEM32AWVTS.DLL

PMNKJHE.DLL file located at C:\WINDOWS\SYSTEM32\PMNKJHE.DLL

I moved these items from the holding cell to 'on probation' before realising that I should have left them as was, as I do not know to what these items are or relate to?? After making this move, I find I cannot move them back to the holding cell or delete them and am at a quandry as to what to do now?...

Can you help??

Don't know of any other sites that are having a contest or giving away software right now.

This is info from WinPatrol Plus search.


Virus Alert – AWVTS.DLL

A file called awvts.dll will appear in your Windows\System or System32 folder. You may see it described as 'MS Events Object'. It installs with Trojan.Vundo.B. The primary job of this Trojan is to contact its controlling server and then download a list of adware or other unwanted programs. This Trojan is known to generate random filenames. Some of these names and folders in which these files can be found are listed at http://www.sarc.com/avcenter/venc/data/trojan.vundo.b.html.

We'd recommend removing this file using WinPatrol. First, kill it under Active Tasks. You'll also want to kill any filenames that appear to be randomly generated for which there is no company or copyright information available. Be on the lookout for other names ending in .dll and consisting of 5 random characters. Next, remove these programs from your IE Helpers and Start Programs (if present). If running WinPatrol 8.x or later, right click each file then select "Delete file on Reboot". Finally, reboot your system.

There's also a free removal tool available from Symantec at http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.html.

# Virus
# Remove

=========================

Dis not find anything on PMNKJHE.DLL so is it spelled right?
Google said Did you mean: pmkhe.dll and this is what it has.
http://www.google.com/custom?hl=en&oe=ISO-8859-1&client=pub-5216032068438142&cof=FORID:1%3BGL:1%3BLBGC:336699%3BLC:%230000ff%3BVLC:%23663399%3BGFNT:%230000ff%3BGIMP:%230000ff%3BDIV:%23336699%3B&sa=X&oi=spell&resnum=0&ct=result&cd=1&q=pmkhe.dll&spell=1

You should post in the Hijackthis - Spyware, Viruses, Worms, Trojans Oh My! and someone that knows how to help you out can help read a Hijackthis log.