|
Posted by H.Pol Sixe on January 15, 2006, 4:57 pm
If you were Registered and logged in, you could reply and use other advanced thread options
A lot of people have had this problem and some seem to have success, but;
I've tried Trend Sysclean and Online, Killbox, HijackThis, Microsoft Anti
Spyware, Mcafee Command Line Scanner (seemed to find and clear the most
objects), Ad-aware (froze up until Mcafee cleanup) in regular, safe mode,
cmd mode, with and without system restore - they all recognize it, look
like something is happening, but every boot up it's back, and re-installs
alt.exe, some of the time. Opens up some TCP connection to someone in Hong
Kong, I think, unless there's something else doing that. How does the bloody
thing stay in there? Is there another seed file *.dll that has to be
deleted I'm missing/leaving? Anyone know anymore tricks?
I'm not sure if it's even doing any harm anymore, just "bugs" me that I
can't expunge the file.
Hank Pol Sixe
hpolvi@hotmail.com
|
|
Posted by pcbutts1 on January 15, 2006, 5:24 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Where is the file located? I will write a small program to remove it. Have
you tried Ewido?
Ewido Security Suite Trial version
http://www.pcbutts1.com/downloads/ewidosetup.exe
--
The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com
>A lot of people have had this problem and some seem to have success, but;
>
> I've tried Trend Sysclean and Online, Killbox, HijackThis, Microsoft Anti
> Spyware, Mcafee Command Line Scanner (seemed to find and clear the most
> objects), Ad-aware (froze up until Mcafee cleanup) in regular, safe mode,
> cmd mode, with and without system restore - they all recognize it, look
> like something is happening, but every boot up it's back, and re-installs
> alt.exe, some of the time. Opens up some TCP connection to someone in
> Hong Kong, I think, unless there's something else doing that. How does the
> bloody thing stay in there? Is there another seed file *.dll that has to
> be deleted I'm missing/leaving? Anyone know anymore tricks?
>
> I'm not sure if it's even doing any harm anymore, just "bugs" me that I
> can't expunge the file.
>
> Hank Pol Sixe
> hpolvi@hotmail.com
>
>
>
|
|
Posted by Leythos on January 15, 2006, 5:30 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Where is the file located? I will write a small program to remove it. Have
> you tried Ewido?
>
> Ewido Security Suite Trial version
> http://www.pcbutts1.com/downloads/[removed]
Ewido Security Suite Trial can be found here:
http://www.ewido.net/en/download/
Ask yourself if you really want to trust the advice and files provided
by a person that has all of their posts deleted, hides by 20+ different
identities, and has foul content on their website that they post links
too in Usenet.
Only download software you can validate as uncompromised - in the case
of non-vendor site you have no guarantee that the files are unmodified
or uncompromised. Anyone providing a link to a non-vendors site with a
direct download should not be trusted, the vendors sites are the safest
place to download their application.
No person of sound mind would download files from a hack site that
requires a password to access the unknown files when they are available
directly from the vendors.
Always remember - only download files from Trusted Sites.
The following links will take you to vendors sites for Spy Ware / Ad
ware removal tools and also for Antivirus tools. After you install any
of these applications and update them, run them in SAFE MODE to allow
them to properly clean your system.
These sites are for downloading Anti-Spyware tools, in order that I
would use them myself:
Dave Lipman's tools:
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
Secured2K's AntiPauper (download link/info at)
http://forums.mcafeehelp.com/viewtopic.php?t=65072
AdAwareSE can be found here:
http://www.lavasoft.de/support/download/
SpyBot Search and Destroy can be found here:
http://www.safer-networking.org/en/download/index.html
HiJack can be found here:
http://www.spywareinfo.com/~merijn/downloads.html
Ewido Security Suite Trial can be found here:
http://www.ewido.net/en/download/
CrapCleaner can be found at the vendors site here:
http://www.ccleaner.com/ccdownload.asp
CleanUp can be found at the vendors site here:
http://www.stevengould.org/software/cleanup/download.html
or from another reputable source:
http://www.tucows.com/get/405276_152071
The following are two links to Antivirus software in order that I would
use them:
You can also download Symantec Trial version of their Antivirus software
from here:
http://www.symantec.com/downloads/
Download AVG Personal Free edition from here:
http://free.grisoft.com/freeweb.php/doc/2/
These are the actual vendors sites, not some unknown or authorized no-
name site. They also don't artificially increase the hits for sites that
get paid for the amount of traffic they can generate like one poster has
admitted to in this group.
--
spam999free@rrohio.com
remove 999 in order to email me
|
|
Posted by Aeisedi on January 15, 2006, 5:31 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>A lot of people have had this problem and some seem to have success, but;
>
> I've tried Trend Sysclean and Online, Killbox, HijackThis, Microsoft Anti
> Spyware, Mcafee Command Line Scanner (seemed to find and clear the most
> objects), Ad-aware (froze up until Mcafee cleanup) in regular, safe mode,
> cmd mode, with and without system restore - they all recognize it, look
> like something is happening, but every boot up it's back, and re-installs
> alt.exe, some of the time. Opens up some TCP connection to someone in
> Hong Kong, I think, unless there's something else doing that. How does the
> bloody thing stay in there? Is there another seed file *.dll that has to
> be deleted I'm missing/leaving? Anyone know anymore tricks?
>
> I'm not sure if it's even doing any harm anymore, just "bugs" me that I
> can't expunge the file.
>
> Hank Pol Sixe
> hpolvi@hotmail.com
>
>
>
|
|
Posted by tosime on January 15, 2006, 5:33 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I had a similar problem with another malware, but it was solved by a "Hijack
This" post to the Aumha.net forum.
It turned out that Spybot was restoring the malware entry in my registry. I
solved the problem by turning off Tea Timer in Spybot. This allowed the
anti-spyware programs to complete the clean up.
What you might try is a program called File Monitor. After you run it, it
provides a running log of all activity on your system. It might point to
what is happening during or after a cleanup.
Good luck...Tony
You can find File Monitor at: www.sysinternals.com
>A lot of people have had this problem and some seem to have success, but;
>
> I've tried Trend Sysclean and Online, Killbox, HijackThis, Microsoft Anti
> Spyware, Mcafee Command Line Scanner (seemed to find and clear the most
> objects), Ad-aware (froze up until Mcafee cleanup) in regular, safe mode,
> cmd mode, with and without system restore - they all recognize it, look
> like something is happening, but every boot up it's back, and re-installs
> alt.exe, some of the time. Opens up some TCP connection to someone in
> Hong Kong, I think, unless there's something else doing that. How does the
> bloody thing stay in there? Is there another seed file *.dll that has to
> be deleted I'm missing/leaving? Anyone know anymore tricks?
>
> I'm not sure if it's even doing any harm anymore, just "bugs" me that I
> can't expunge the file.
>
> Hank Pol Sixe
> hpolvi@hotmail.com
>
>
>
|
| Similar Threads | Posted | | RE: adware delete? in use? | January 12, 2006, 10:47 am |
| cannot delete trojan file | July 6, 2005, 5:08 pm |
| Still getting Mail for delete Domain Name? | February 24, 2006, 3:54 pm |
| Re: Still getting Mail for delete Domain Name? | February 24, 2006, 4:02 pm |
| Pc-Cillin install wants to delete NAV???? | September 30, 2006, 4:02 pm |
| Safe to delete these files? | March 10, 2007, 11:53 pm |
| PROGRAM Will not delete all way virus/ malware????? | September 20, 2006, 11:38 pm |
| Packed.Hacktool -- unable to delete... | September 27, 2007, 12:00 am |
| cannot find anything about this virus and how to delete it (SPR/YFlood.A.3) | March 11, 2008, 4:58 pm |
| unknown virus that delete zip and jpeg file | June 12, 2007, 2:17 am |
|
XML site map