Spy ware

[Rowan]

Oh and a copy of another report of it, what it is linked to and how to clean it:
http://computercops.biz/modules.php?name=Forums&file=viewtopic&p=170333

 

[Taians]

Cool thanks Jane. Managed to get a VX finder out of it. Dont really have cash atm for BOC cleaner and your second link doesn't seem to work for me

Anyway...

Files Found---
C:\WINDOWS\System32\6ro4svc.dll
C:\WINDOWS\System32\6yo4svc.dll
C:\WINDOWS\System32\abd.dll
C:\WINDOWS\System32\aisnds.dll


Guardian Key---

User Agent String---
{8C92CB95-9E16-4855-9429-2A16C4B2AD9E}

Anyone what to do ? Cant delete those files

 

[Rowan]

Don't know why you can't get that page:

Download the following CWshredder http://www.computercops.biz/zx/phoenix22/cws.zip
Ad-aware http://www.lavasoft.de/software/adaware/ &
Spy-Bot http://www.lurkhere.com/~nicefiles/ssd12.exe
update both programs. When updating Spybot make sure you select either the US or AU server, the default tends to freeze the program.

Reboot and DON'T connect to the net run CWShredder and allow the program to fix what it finds.

Then make the following changes to the settings in Ad-aware.

-Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Scanning Engine:
check: "Unload recognized processes during scanning."

- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Cleaning Engine:
Check: "Let Windows remove files in use after reboot."

Press "Scan Now"

- Check option "Use Custom scanning options"
- Check option "Activate In-Depth Scan"
- Press "Select drives\folders to scan"
- Select the active partition which is usually C:

Now press "Next" to let Ad-aware scan your drives...

Allow the program to fix what it finds. Now scan with Spybot and allow the program to fix what it finds.

Thats what it says to do anyway.

 

[Taians]

Ahh ok cool. Been doing that anyway. Ad-aware is the only one that actually finds anything and even then, it only finds 1-2 files. It cant delete them either except on a reboot. Once it reboots though, a new file(s) seems to get generated in the System32 folder. Viscous circle atm. Delete, find new folder, delete etc etc