Plz Help Spyware Has Infested My Computer

2007-04-04 19:29:28

#1

HELPPLZ: Banned; +1|6689

Today i surfing the web and i went to a video website. I tried watching the videos but all i could hear was the audio and a popup came up saying i needed to download additional software to view the video. I've had this happen to me before so i trusted the thing and ran the software.

Now i have this shit on my computer that i can't get rid of. http://spylocked.com/ its a fake antispyware thing that tries to sell itself to you when in reality it is spyware. Going to the site isn't gonna mess you up btw. So i uninstalled the program itself but it left some kind of Trojan on my computer. In my taskbar there is a blinking ? that changes to an 0 with an x in it. Then a phony thing pops up every thirty seconds that says SYSTEM ALERT SPYWARE HAS BEEN DETECTED ON YOUR COMPUTER.

My norton antivirus can't detect it and when i tried to end the process with ctr alt delete it said access was denied. There are a ton of sites that offer good programs that will delete it but despite that they say "FREE" it is a free scan not free removal (which costs 40 dollars) If you guys use any quality free programs or could help explain the manual removal of it. I found this on a website. Maybe you guys will understand it. THANKS!!!
Stop SpyLocked Processes:
spylocked.exe
SpywareLocked.exe (new)
Spy-Locked.exe (new)

Unregister SpyLocked DLL Files:
xkrdk.dll
onwtj.dll
fyxkaah.dll
higehsg.dll
geplxss.dll
tvomnc.dll
tahxqcj.dll
qvjpt.dll
oyopu.dll (new)
yronl.dll (new)
isadd.dll (new)

Find and Delete these SpyLocked Files:
spylocked.exe
xkrdk.dll
onwtj.dll
fyxkaah.dll
higehsg.dll
geplxss.dll
tvomnc.dll
tahxqcj.dll
qvjpt.dll
oyopu.dll (new)
yronl.dll (new)
isadd.dll (new)
pmsnrr.exe (new)
pmmnt.exe (new)
isamntr.exe (new)
avD.exe (new)
codecaddon1169[1].exe (new)
SpywareLocked 3.3.lnk (new)
Spy-Locked.exe (new)

Remove SpyLocked Registry Values:
43DF1CEE-70B3-4E2D-A740-4AC468786207
6AFB5B8E-ACFD-4489-91B3-DAA1388A31EC
E9817993-83FF-4343-B14E-6CDFB378B21D
815B01A0-BF97-41E9-ACF2-32B76F98A960
5CA1A9F6-10F8-4008-B884-755B25B6848A
F5D23930-23C6-440E-AB55-D019E1171539
50450F27-B90B-422B-A4C9-5EC5A5B78001
2C5B5226-045D-4A46-B4FC-228B0891FEEC
314120E4-5A05-492C-9BF2-22558CF0F202
630CBF61-54CC-4AC3-97B0-D4071345807C
EDE2A2B4-B1CB-4BF8-93D1-154E49284A71
314120E4-5A05-492C-9BF2-22558CF0F202
C5BF4465-5322-462F-B41F-459F649F3996
392D4A36-6ADF-4A99-A820-3014A53E62E3
3BF6C840-4D12-4FB5-88A2-E2BC03461DC2
42F16135-D0A4-43A2-990C-27FCABD9C19F
E4703CF2-7F82-4AD7-B317-8EC1CBC9B619
4D31CCA1-C42B-4796-851F-CA8ED4CD2A7E
(admins plz don't delete this thread i really need help!)

2007-04-04 19:36:01

#2

paranoid101: Ambitious but Rubbish; +540|7196

I'm not great with this type of thing, but the last time I had a bad Virus I turned off System restore, then rebooted the PC in safe mode, then I run my anti virus and spyware programs and anything they found I deleted out of the virus vault, this way it stops replete programs from running at start up.

Remember to turn system restore on after all this when you reboot.

Also try downloading Avast anti virus its free and might be able to find it better than norten.

Try here for all you anti virus and spyware download needs - http://www.bleepingcomputer.com/forums/topic405.html

Good luck mate.

2007-04-04 19:37:51

#3

cowami: OY, BITCHTITS!; +1,106|6745|Noo Yawk, Noo Yawk

Shouldn't this be in the tech section? And I like the user name.

2007-04-04 19:38:17

#4

maffiaw: ph33r me 傻逼; +40|6876|Melbourne, AUS

next time don't trust any popups on pr0n sites mate....

Ad-Aware might help...
www.lavasoft.com

2007-04-04 19:41:07

#5

gator45666: Member; +6|7084|St.Petersburg, Fl.

Darn Spyware is givin' porn a bad name

2007-04-04 19:42:14

#6

Paco_the_Insane: Phorum Phantom; +244|7100|Ohio

i like spybot search and destroy - http://www.majorgeeks.com/download2471.html

2007-04-04 19:44:33

#7

Tehremos: Parcel of ol' Crams; +128|6864|Somersetshire

i had this, it seems to have gone off my comp now,

AVG anti spyware found the Trojan, but every time i deleted it, it would come back so i moved it to quarantine and I've had no more problems with it

2007-04-04 19:45:33

#8

Canin: Conservative Roman Catholic; +280|6931|Foothills of S. Carolina

Bitdefender has a good online scanner that I had to use recently to remove a worm that nothing else seemed to find and get rid of. But definitely turn off restore and boot into safe mode to remove them.

2007-04-04 19:46:36

#9

HELPPLZ: Banned; +1|6689

thanks for the help guys i have tried a ton of programs so far and the free ones can't seem to find it and the expensive ones do. Does anyone understand the manual removal? If that just involves going through some folders and deleting them i think that would be easier.

2007-04-04 19:46:51

#10

ATG: Banned; +5,233|6985|Global Command

Paco_the_Insane wrote:
i like spybot search and destroy - http://www.majorgeeks.com/download2471.html

k, I'm gonna trust you. If it works, you get a plus.

2007-04-04 19:47:21

#11

Ubersturmbannfuhrer: I am a fucking homosexual; +211|7062|Parainen, Finland

And you are still not being specific enough!!!
Did you disconnect the pc from the modem and restart the pc and did you do the check again???
This is sometimes the solution for a problem like this... You don´t need to be online all the time.
Sometimes this is also smart to do while dealing with classified info!!!

2007-04-04 19:47:53

#12

ATG: Banned; +5,233|6985|Global Command

HELPPLZ wrote:
thanks for the help guys i have tried a ton of programs so far and the free ones can't seem to find it and the expensive ones do. Does anyone understand the manual removal? If that just involves going through some folders and deleting them i think that would be easier.

i've had luck getting rid of this kinda crap by contrl panel/ remove programs.

2007-04-04 19:50:37

#13

paranoid101: Ambitious but Rubbish; +540|7196

Tehremos wrote:
i had this, it seems to have gone off my comp now,

AVG anti spyware found the Trojan, but every time i deleted it, it would come back so i moved it to quarantine and I've had no more problems with it

Its remaking itself every time you reboot, just turn off System restore, then rebooted the PC in safe mode, run AVG again to find it, just delete it in your virus vault, reboot up and turn System restore on again, run AVG again and I'm betting it will be gone.

This worked for me with a Trojan using AVG that kept coming back.

2007-04-04 19:52:12

#14

fadedsteve: GOP Sympathizer; +266|6946|Menlo Park, CA

ATG wrote:
Paco_the_Insane wrote:
i like spybot search and destroy - http://www.majorgeeks.com/download2471.html
k, I'm gonna trust you. If it works, you get a plus.

I have it, it works good!

2007-04-04 19:52:42

#15

paranoid101: Ambitious but Rubbish; +540|7196

Heres a good site for free downloads - http://www.freewarefiles.com/

2007-04-04 19:59:19

#16

Point&Shoot: Tank Whore; +52|7002|Canada

I've had similar. Try and find which files it has installed, check for files in your windows or windows/system32 directory that were created when you installed the program. Even a full search for files with a similar time-stamp. Try tracking the files through your task manager too. Delete as much as you can find. You may find it impossible to delete some files that are still running and can't be killed. Some may be deleted only to re-appear, sometimes with an altered name. The best way I found to delete those was by booting off an alternate HDD with a clean version of your OS, perhaps you buddies HDD and slave it to your drive, then using the boot-up selector F8 I think. If you have just a boot-disk, that may work to. But then you can boot without loading those files and delete them manually, remeber to that your drive may be the D: drive. Many anti-spyware programs will try to re-boot and delete, but it usually doesn't work.

2007-04-04 20:03:33

#17

HELPPLZ: Banned; +1|6689

Ubersturmbannfuhrer wrote:
And you are still not being specific enough!!!
Did you disconnect the pc from the modem and restart the pc and did you do the check again???
This is sometimes the solution for a problem like this... You don´t need to be online all the time.
Sometimes this is also smart to do while dealing with classified info!!!

I've tried a ton of things. Right after i installed the thing i realized that it wasn't actually some sort of video player update. So i found the program and uninstalled it i realized that the program had left some type of trojan. There is an icon in my taskbar that is pretending to be a legit windows thing that is warning me about spyware when in reality it is just trying to get me to buy the shitty software by constantly giving me popups that link to the site.

I have used my firewall to block all traffic, restarted my computer multiple times and done a bunch of scans. The only program that i have installed that detects it is a program by the name of SpyNoMore, unfortunately it costs 40 bucks. I guess i will try the programs you guys recommended. As for the freeware site i'm not sure i trust them.

2007-04-04 20:05:49

#18

paranoid101: Ambitious but Rubbish; +540|7196

HELPPLZ wrote:
Ubersturmbannfuhrer wrote:
And you are still not being specific enough!!!
Did you disconnect the pc from the modem and restart the pc and did you do the check again???
This is sometimes the solution for a problem like this... You don´t need to be online all the time.
Sometimes this is also smart to do while dealing with classified info!!!
I've tried a ton of things. Right after i installed the thing i realized that it wasn't actually some sort of video player update. So i found the program and uninstalled it i realized that the program had left some type of trojan. There is an icon in my taskbar that is pretending to be a legit windows thing that is warning me about spyware when in reality it is just trying to get me to buy the shitty software by constantly giving me popups that link to the site.

I have used my firewall to block all traffic, restarted my computer multiple times and done a bunch of scans. The only program that i have installed that detects it is a program by the name of SpyNoMore, unfortunately it costs 40 bucks. I guess i will try the programs you guys recommended. As for the freeware site i'm not sure i trust them.

Havant had one problem with Freewarefile site, but still its up to you.

2007-04-04 20:41:27

#19

heggs: Spamalamadingdong; +581|6844|New York

You can go into safe mode and individually delete each file. Even if it manages to set itself back in your RAM. I removed a couple of viruses this way. It was just a matter of researching to find each individual file, and going through the registry to delete them all.

CAUTION: this is dangerous, as you can easily delete some important files. If you go this route, be careful!

Remember Me As A Time Of Day

2007-04-04 20:45:23

#20

TrollmeaT: Aspiring Objectivist; +492|7128|Colorado

asquared.com for a free trial.

2007-04-04 21:05:19

#21

Kmar: Truth is my Bitch; +5,695|7057|132 and Bush

fadedsteve wrote:
ATG wrote:
Paco_the_Insane wrote:
i like spybot search and destroy - http://www.majorgeeks.com/download2471.html
k, I'm gonna trust you. If it works, you get a plus.
I have it, it works good!

Aside from a good AV program (Kapersky/AVG) you should be using Spybot. After you run spybot follow it immediately with hijack this. http://www.spywareinfo.com/~merijn/prog … hijackthis
Run Hijackthis and save your log. Paste your log here http://hjt.networktechs.com/ and hit parse. That will give you a good idea of what to look for. If you have some that still won't come out (rootkits etc) repeat all this while in Windows safe mode without networking.

Run these test while disconnected from the internet of course. I also recommend using Firefox if you are not and get the "no script" extension.

Xbone Stormsurgezz

2007-04-04 21:07:33

#22

some_random_panda: Flamesuit essential; +454|6846

Try formatting, but ONLY if nothing else works.
Backup all needed files, being careful not to backup the virus too.
Insert Windows CD and boot from it.
Delete C: drive.
Remake C: partition.
Install windows. Done!

For multiple Hard Drives, format them beforehand to make things easier and faster.
For more information go to:
http://www.ehow.com/how_6026_format-hard-drive.html
http://www.ehow.com/how_6027_partition-hard-drive.html

Last edited by some_random_panda (2007-04-04 21:08:47)

2007-04-05 00:16:10

#23

=NHB=Shadow: hi; +322|6821|California

try www.nanoscan.com and then go to totalscan after u scanned and it should kinda work?

2007-04-05 00:30:11

#24

masculata: Member; +24|7132|45° 30',North by 73° 35',West

- Create a new user account
- Login to your pc (safe mode) with this new account
- The problem with installing software (Anti-virus/spyware) on an infected machine is, the phucker is infected and you can't trust any software installed post infection.
- Then zip on over to Trend Anti-Virus and run there free online spyware anti-virus app called Housecall.
- The problem is that all the good coders are now making $ writing spyware and or apps for zombifying computers and you might as random_panda suggested have to reformat your comp.

2007-04-05 00:37:02

#25

Magpie: international welder....Douchebag Dude, <3 ur mom; +257|6982|Milkystania, yurop

AVG
Spyboot search and destroy
And Ad-Aware are good
what one dosent find the others will
Good luck prondownloader

BF2S Forums Plz Help Spyware Has Infested My Computer

Paco_the_Insane wrote:

HELPPLZ wrote:

Tehremos wrote:

ATG wrote:

Paco_the_Insane wrote:

Ubersturmbannfuhrer wrote:

HELPPLZ wrote:

Ubersturmbannfuhrer wrote:

fadedsteve wrote:

ATG wrote:

Paco_the_Insane wrote:

Board footer