Computing.Net > Forums > Security and Virus > A Fairly advanced spyware issue.

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

A Fairly advanced spyware issue.

Reply to Message Icon

Name: dxpsman
Date: September 24, 2009 at 19:00:34 Pacific
OS: Windows XP
Product: Microsoft Windows xp home sp2
Subcategory: Spyware
Tags: Spyware, malware
Comment:

Hey guys,

I've done a ton of tech support and the like, and usually a good Hijack This or Spybot scan takes care of pretty much any issues a PC has, but this is really getting to me.

So here's the story - my beloved girlfriend was trying to watch a video online and ended up installing a "codec" that was needed to watch it. She got the memory dump BSOD, restarted, and got another one.

The only new process that runs appears to be called 'b', which I've msconfig'ed the hell out of startup. I also ran CCleaner, which probably didn't do anything, but what the hell. Anyways, my computer runs fine now, although startup is a bit slow.

Here's the killer: Even in Safe Mode, doing any kind of Spyware/Virus Scan is futile, because the program is automatically closed. And, get this - it's also uninstalled (almost completely, too). Also, system restores never can be completed.

Finally, here's the link to the site that got her: http://answers.yahoo.com/question/i...

The first link provided is the culprit - I don't know if that might help someone, but there it is.

Thanks in advance,
Brandon



Sponsored Link
Ads by Google

Response Number 1
Name: Jack Frost46
Date: September 25, 2009 at 03:36:06 Pacific
Reply:

It seems you have b.exe , read this post ,

http://www.computing.net/answers/se...

......


0

Response Number 2
Name: ignys
Date: September 25, 2009 at 08:27:12 Pacific
Reply:

You should scan your computer with Spyware Doctor. Download free version from Google Pack website:
http://pack.google.com/intl/en/pack...


_____________________________________
http://cid-556a72d9038a7868.spaces....


0

Response Number 3
Name: Mister_Mask
Date: September 25, 2009 at 08:49:38 Pacific
Reply:

Hi,

Spyware doctor is not a good software.
Pc tool (editor of SpywareDoctor) uses some marketing technics who are ... unworthy of a serious editor : Fake security blogs.
On top of that, this softaware is not powerful ...
(He demands to pay something to disinfect your machine)

@+

Sorry for my future orthographic faults, English is not my mother tongue ;=)


0

Response Number 4
Name: dxpsman
Date: September 25, 2009 at 12:58:37 Pacific
Reply:

Thanks for the hand. B.exe was found and deleted. Cheers!


0

Response Number 5
Name: XpUser4Real
Date: September 25, 2009 at 14:19:44 Pacific
Reply:

hmmmm....are you sure it is gone? If not post back and we'll get you running properly again

Some HELP in posting on Computing.net plus free progs and instructions Cheers


2

Related Posts

See More



Response Number 6
Name: dxpsman
Date: September 25, 2009 at 16:23:41 Pacific
Reply:

You're right. It's not gone. Scanners still crash.


0

Response Number 7
Name: XpUser4Real
Date: September 25, 2009 at 16:31:17 Pacific
Reply:

AH, I figured so.
From what I know B.exe is a rootkit infection. You may want to try unhackme:
http://www.greatis.com/unhackme/dow...
It's a fully functional 30 day trial that will remove your infections.

I would suggest using the beginners guide on the left of the download page and doing all the scans untill the slate is clean. Any questionable threats, post them back and we'll let you know the what to do with them.
Good Luck

Some HELP in posting on Computing.net plus free progs and instructions Cheers


2

Response Number 8
Name: dxpsman
Date: September 25, 2009 at 17:11:28 Pacific
Reply:

I downloaded and installed the program. As with all of the other programs, the infection shut down the program after a matter of seconds and made it unusable.

I don't think this can be removed with a program.


0

Response Number 9
Name: XpUser4Real
Date: September 25, 2009 at 17:40:11 Pacific
Reply:

Boy, that has me rattled too! If you could get unhackme to work I'm sure you could remove the problem.

Persistance will work. Try other scanners like Trojan Remover, see if that one loads up and works:
http://www.simplysup.com/tremover/d...

Eventually there will be light at the end of the tunnel.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


1

Response Number 10
Name: XpUser4Real
Date: September 25, 2009 at 17:45:54 Pacific
Reply:

If you can still access your PC I would suggest that you save all your important documents, pics, etc to CD's DVD's or Thumbdrives

If worse comes to worse you could try a parallel install of XP home (if you have an XP Home disc) It will warn you it's not good to put 2 operating systems on the same partition...BUT you can do it.
I've done that many times luckily not losing anything. Then you could get the PC running and get your valuable files saved so that you could do a full reformat and install if your problem can't be rectified.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


1

Response Number 11
Name: dxpsman
Date: September 25, 2009 at 20:47:20 Pacific
Reply:

I always keep my files backed up on an external HD.

The strange thing is that the computer runs perfectly, but malware scanners don't work. Aside from that, there's no CPU leakage or wasted RAM to speak of. It's annoying to know it's still there, but it's not really harmful so far... I'll keep trying, but I was hoping this was a well-known bug that I'd never encountered.


0

Sponsored Link
Ads by Google
Reply to Message Icon





Use following form to reply to current message:

Login or Register to Reply
LoginRegister


Sponsored links

Ads by Google


Results for: A Fairly advanced spyware issue.

Spyware- Re-directing links, Random Ads sound www.computing.net/answers/security/spyware-redirecting-links-random-ads-sound/26956.html

Can't access McAfee - think I'm infected www.computing.net/answers/security/cant-access-mcafee-think-im-infected/26121.html

How to remove Trojan.NSIS.Voter.a www.computing.net/answers/security/how-to-remove-trojannsisvotera/21612.html