Adware Qoolaid - SSPDKP.exe

Adware Qoolaid - SSPDKP.exe

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Adware Qoolaid - SSPDKP.exe Bob Barbabella 08-22-2005
Posted by =?Utf-8?B?Qm9iIEJhcmJhYmVsbGE= on August 22, 2005, 5:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On an XP Pro system with SP2, I've been struggling with the file sspdkp.exe
in \windows\system32 that keeps coming back after it is deleted via booting
to the command prompt. It appears in the registry under local
machine\software\microsoft\shared tools\msconfig\startupreg. I deleted all
and after a short period of time after loading the desktop, Microsoft
Antispyware will popup a windows saying it blocked sspdkp.exe, but it really
didn't. It is back.

I know that there is another exe or dll file that is generating the
sspdkp.exe. By the way, there is no physical connection to the internet
during the entire time I've been working on this. This system also had
adware.look2me. It kept coming back until we finally figured out the root
source.

As the Beatles would say, help me if you can!

Thanks,

Bob

Posted by David H. Lipman on August 22, 2005, 6:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| On an XP Pro system with SP2, I've been struggling with the file sspdkp.exe
| in \windows\system32 that keeps coming back after it is deleted via booting
| to the command prompt. It appears in the registry under local
| machine\software\microsoft\shared tools\msconfig\startupreg. I deleted all
| and after a short period of time after loading the desktop, Microsoft
| Antispyware will popup a windows saying it blocked sspdkp.exe, but it really
| didn't. It is back.
|
| I know that there is another exe or dll file that is generating the
| sspdkp.exe. By the way, there is no physical connection to the internet
| during the entire time I've been working on this. This system also had
| adware.look2me. It kept coming back until we finally figured out the root
| source.
|
| As the Beatles would say, help me if you can!
|
| Thanks,
|
| Bob

As you can see, deleting a file is not enough. You need to use appropriate anti
malware
applications.

Besides MS AS, use Ad=aware SE v1.06 and SpyBot Search and Destroy v1.4 (both
fully updated)
and see if they don't remove the rest of the adware/spyware.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?QW5keU1hbmNoZXN0YQ== on August 23, 2005, 5:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

Try using Ewido Security Suite and L2MFix as I think this is going to be
hard work for standard removers both the above are free and I believe the new
look2me is really difficult and the other is probably related to Qoologic
Trojan both use random names and drop files all over the place which can
regenerate after being removed so go for the 2 removers previously suggested
then use the two I posted above and use L2mfix in normal mode then it will
reboot the machine and perform the clean up with Ewido update in normal mode
and run the scanner in safe mode also it may help to get Ccleaner to remove
all the temp and unused files after the clean up as there probably will be
more files in there.Both are easily available on the net and should make
things abit easier to remove in my view

Let us know if you have problems

Regards Andy


"David H. Lipman" wrote:

>
> | On an XP Pro system with SP2, I've been struggling with the file sspdkp.exe
> | in \windows\system32 that keeps coming back after it is deleted via booting
> | to the command prompt. It appears in the registry under local
> | machine\software\microsoft\shared tools\msconfig\startupreg. I deleted all
> | and after a short period of time after loading the desktop, Microsoft
> | Antispyware will popup a windows saying it blocked sspdkp.exe, but it really
> | didn't. It is back.
> |
> | I know that there is another exe or dll file that is generating the
> | sspdkp.exe. By the way, there is no physical connection to the internet
> | during the entire time I've been working on this. This system also had
> | adware.look2me. It kept coming back until we finally figured out the root
> | source.
> |
> | As the Beatles would say, help me if you can!
> |
> | Thanks,
> |
> | Bob
>
> As you can see, deleting a file is not enough. You need to use appropriate
anti malware
> applications.
>
> Besides MS AS, use Ad=aware SE v1.06 and SpyBot Search and Destroy v1.4 (both
fully updated)
> and see if they don't remove the rest of the adware/spyware.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Similar ThreadsPosted
Adware.QoolAid September 20, 2005, 9:16 am
Adware bug February 20, 2008, 6:41 pm
Adware.Starware November 21, 2005, 1:14 pm
Registry Adware? April 1, 2006, 11:47 am
Malicious Adware April 24, 2006, 2:07 pm
RE: adware delete? in use? January 12, 2006, 10:47 am
AVG AS says my ISP gave me adware... November 28, 2006, 2:11 pm
Virus put adware on PC October 27, 2007, 8:26 am
virus/adware protection August 27, 2005, 8:50 pm
How to Remove Adware.TargetSaver ? March 31, 2006, 6:22 pm

The site map in XML format XML site map

Contact Us | Privacy Policy