Spyware Help!!!!!

Discussion in 'Computer Science & Culture' started by A Canadian, Dec 28, 2004.

Thread Status:
Not open for further replies.
  1. A Canadian Why talk? When you can listen? Registered Senior Member

    Messages:
    1,126
    I need help on spy-ware and ad-ware:

    Look at this log, I need help bad:

    =====================================
    WareOut scanner report
    =====================================
    Time/Date: 27/12/2004 11:26:43 PM

    Type : Browser Helper Object
    Name : 
    File :

    Type : Toolbar
    Name : {8E718888-423F-11D2-876E-00A0C9082467}
    File : C:\WINDOWS\System32\msdxm.ocx

    Type : Toolbar
    Name : {ACB1E670-3217-45C4-A021-6B829A8A27CB}
    File :

    Type : Toolbar
    Name : {fc3fe3ca-f55f-4f1c-b28e-f7a105ed8143}
    File : C:\DOCUME~1\Ryan\APPLIC~1\btrdrgckiy.dll

    Type : Toolbar
    Name : {06ABAA2D-34AB-4902-A326-409BD9B9A7A5}
    File : C:\WINDOWS\System32\iecust.dll

    Type : Toolbar
    Name : {BA52B914-B692-46c4-B683-905236F6F655}
    File : c:\progra~1\mcafee.com\vso\mcvsshl.dll

    Type : Search Hook
    Name : {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
    File : C:\WINDOWS\System32\shdocvw.dll

    Type : Search Hook
    Name : {DE1CB844-3079-4503-55A2-D865BD01C9D5}
    File : new32.dll

    Type : Delay Load Object
    Name : PostBootReminder
    File : C:\WINDOWS\system32\SHELL32.dll

    Type : Delay Load Object
    Name : CDBurn
    File : C:\WINDOWS\system32\SHELL32.dll

    Type : Delay Load Object
    Name : WebCheck
    File : C:\WINDOWS\System32\webcheck.dll

    Type : Delay Load Object
    Name : SysTray
    File : C:\WINDOWS\System32\stobject.dll

    Type : Run HKLM
    Name : NvCplDaemon
    File : RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

    Type : Run HKLM
    Name : nwiz
    File : nwiz.exe /install

    Type : Run HKLM
    Name : QuickTime Task
    File : "C:\Program Files\QuickTime\qttask.exe" -atboottime

    Type : Run HKLM
    Name : McAfee Guardian
    File : "C:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU

    Type : Run HKLM
    Name : Excite Private Messenger Pipe
    File : C:\Program Files\Excite\PrvtMsgr\bin\x8IMPipe.exe

    Type : Run HKLM
    Name : MessengerPlus2
    File : "C:\Program Files\Messenger Plus! 2\MsgPlus.exe"

    Type : Run HKLM
    Name : AltnetPointsManager
    File : c:\program files\altnet\points manager\points manager.exe -s

    Type : Run HKLM
    Name : Pcsv
    File : C:\WINDOWS\system32\pcs\pcsvc.exe

    Type : Run HKLM
    Name : Dpi
    File : C:\Program Files\Common Files\Dpi\dpi.exe

    Type : Run HKLM
    Name : Prein
    File : C:\DOCUME~1\Ryan\LOCALS~1\Temp\app3.tmp

    Type : Run HKLM
    Name : LXSUPMON
    File : C:\WINDOWS\System32\LXSUPMON.EXE RUN

    Type : Run HKLM
    Name : SysSupport
    File : TorontoMail.exe

    Type : Run HKLM
    Name : wormexe
    File : iesetupdll.exe

    Type : Run HKLM
    Name : MCUpdateExe
    File : C:\PROGRA~1\mcafee.com\agent\mcupdate.exe

    Type : Run HKLM
    Name : VSOCheckTask
    File : "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask

    Type : Run HKLM
    Name : MISAggregator
    File :

    Type : Run HKLM
    Name : MCAgentExe
    File : C:\PROGRA~1\McAfee.com\Agent\McAgent.exe

    Type : Run HKLM
    Name : MCAFInstaller_vsoins.ui
    File : C:\WINDOWS\TEMP\mcu21.tmp\MCAPPINS.exe /v=3 /start=vsoins.ui::default.htm

    Type : Run HKLM
    Name : VirusScan Online
    File : c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe

    Type : Run HKLM
    Name : VirusScan Online
    File : c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe

    Type : Run HKCU
    Name : JavaUpdate0.07
    File : C:\WINDOWS\System32\vvzi.exe

    Type : Run HKCU
    Name : TorontoMail
    File : 321102.exe

    Type : Run HKCU
    Name : SysEntry
    File : prcmon.exe

    Type : Run HKCU
    Name : newbreed
    File : progmen.exe

    Type : Shell parameter changed
    Name : Shell parameter changed
    File : Explorer.exe C:\WINDOWS\System32\System32.exe

    Type : Startup directory item
    Name : desktop.ini
    File :

    Type : Common Startup directory item
    Name : desktop.ini
    File :

    Type : Common Startup directory item
    Name : Intes KeyChange.lnk
    File :

    Type : Common Startup directory item
    Name : MemTurbo.lnk
    File :

    Type : Common Startup directory item
    Name : Microsoft Office.lnk
    File :

    Type : Task Scheduler Object
    Name : {438755C2-A8BA-11D1-B96B-00A0C90312E1}
    File : C:\WINDOWS\System32\browseui.dll

    Type : Task Scheduler Object
    Name : {8C7461EF-2B13-11d2-BE35-3078302C2030}
    File : C:\WINDOWS\System32\browseui.dll

    Type : Trusted site
    Name :
    File :

    -----------------------

    I also have mcafree virus scan, but it has not been picking up on these programs when I run a full virus scan.


    Help?

    Windows keeps reminding that there is a bad spyware/adware on my computer. And clicking OK only sends me to a site where I must purchase software.....

    I need help please.

    I want this shit off my brothers computer. His friends already fucked it up enough when he was living on his own.... I already got rid of tons of spyware stuff and viruses.... but when I asked my bro to pick up a virus scanner a few months ago, he got mcafee....

    Please Register or Log in to view the hidden image!



    Please help?
     
  2. Google AdSense Guest Advertisement



    to hide all adverts.
  3. Voodoo Child Registered Senior Member

    Messages:
    1,296
    It may involve a window, but that is not windows. Windows does not have any anti-spyware applications or the capacity to detect such aps.

    Firstly, stop your brother installing bullshit. You generally do not need anti-spy software if you check what you are installing. Search for it on the net. Read the EULA.

    2) Wareout is exceedingly dodgy. http://www.spywarewarrior.com/rogue_anti-spyware.htm.

    3) I'd dl a reputable anti-spyware ap. Lavasoft's adaware is my favourite, does the biz, has a nice interface. It will remove this impressive collection of crud from your computer.
     
  4. Google AdSense Guest Advertisement



    to hide all adverts.
  5. oscarmitre Registered Senior Member

    Messages:
    30
  6. Google AdSense Guest Advertisement



    to hide all adverts.
  7. §outh§tar is feeling caustic Registered Senior Member

    Messages:
    4,832
    lavasoft has a nice spiffy adware cleaner.

    get that because its the unofficial official standard for adware cleaning.

    i personally don't use it because i don't really care if spyware infects my computer. i have seen no evidence of spyware, and my antivirus hasn't picked up any. my firewall also hasn't picked up anything suspicious. the only bad thing i have downloaded on the current install was a trojan, which I double clicked by mistake while trying to delete.

    best thing to do is get a breath of fresh air and do a clean reinstall. then you can start anew with SP1 and antivirus protection. SP2 is bad. You hear me? Bad. I don't use it and have no need for it.
     
  8. Stryder Keeper of "good" ideas. Valued Senior Member

    Messages:
    13,105
    You should look at the FAQ (Which admittedly needs an update)
    http://www.sciforums.com/showthread.php?t=35874

    It has a few links to different programs of use when defending a computer from spyware.
    (Notibly Spyblaster is a good one to use "Before" you start getting spyware, it doesn't remove spyware however it does stop it installing on the computer)
     
  9. A Canadian Why talk? When you can listen? Registered Senior Member

    Messages:
    1,126
    I am having a small problems now, whenever I reboot my computer my, the modem trys to make a phone call...
    virus scan has not picked up anything and there is nothing new in my connections page

    Please Register or Log in to view the hidden image!

    make it stop
     
  10. Voodoo Child Registered Senior Member

    Messages:
    1,296
    The virus scanner probably won't pick up things that aren't viruses in much the same way that a fork won't pick up soup.

    Most likely your brother has downloaded a porn dialer. You should check your start-up folder in the start menu. Move stuff out if you think it sounds dodgy.
    If you type msconfig into Start button-->run you can peruse the things that execute on start up. There might be some trial and error involved in finding the culprit and even then this might not work.
     
  11. oscarmitre Registered Senior Member

    Messages:
    30
    Good point - I think Spybot will identify diallers. But for a good cleanup of all of your computer try the free online scan at http://www.pandasoftware.com

    I ran it over mine and it dug out stuff everything else missed. It is very thorough. Check the section for "scan of entire computer"
     
  12. Alpha «Visitor» Registered Senior Member

    Messages:
    1,179
    An antivirus scans for viruses and worms, not spyware & adware. You need a program like Ad-aware or Spybot (I'd recommend both, as neither one finds everything). I think Spybot is the most likely one to find the dialer. Use these links, not the ones given by others.
    Someone mentioned Spywareblaster, which is good to have. It will prevent a lot of crap you don't want from being installed. Also, a lot of stuff gets installed due to vulnerabilities in Internet Explorer. You should use Firefox instead. With these things your system will be much better protected, and you'll not likely have to worry about these things anymore.
     
  13. Xko Registered Senior Member

    Messages:
    45
  14. user08 Registered Member

    Messages:
    1
    hi

    Sometimes a good antivirus like Kaspersky which you can find [mod edit] by searching for Kaspersky[/edit] , scans also for spyware and ad-ware. I know it because it happened to me and I wouldn't like this to happen to anybody. So, get a good antivirus and eventually a spyware program and relax.
     
    Last edited by a moderator: Jul 15, 2010
  15. Dr Mabuse Percipient Thaumaturgist Registered Senior Member

    Messages:
    714
    Go pay for Spyware Doctor, for $29, and you won't go through this again. It will also clean whatever has you infected now.

    Less than $3 a month is worth it to not waste your time and lose your data.
     
Thread Status:
Not open for further replies.

Share This Page