Anyone recognize these as Spyware apps?

[Paul B.]

In Windows ME, these two "things" appear when I do CTRL-ALT-DEL and view
the "Close Window"...
Vrvqa
Jsrz
Then when I try to "End Task" on one of these, and again do
CTRL-ALT-DEL, this one shows up...
Czo6whmn
Again, when I "End Task" on that one, it turns into these two...
Pgowp
Jfso2e5d
and then this one shows up...
Dwpo

I mistakingly downloaded Grokster and got zapped with piles of Adware.
I ran Ad-aware and Spybot (both) and they removed most of that trash.
However, there still are problems with my system (such as can't open
Windows Explorer properly) and othe irritating things.

Anyone know how to remove them? Which files to delete?
Thanks for any help.

[Jim Byrd]

Hi Paul - If you go to this page at Jim Eshelman's site, here:
http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
of a number of possible parasites on your machine will be made to help you
identify and remove them. NOTE: You will need to disable Ad Blocking in
Zone Alarm 3.x, if present or any other Ad Blocking software which
interferes with Java Scripting for this scan to work. You should get a
message between the two lines of **** giving the results of the scan.

From your description it's difficult to be sure just what might be left, and
therefore to prescribe any specific actions. Do the following:
Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Go to Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/in...74&act=SF&f=11

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).

In addition to the above, if you don't already have them here are some
things which will help you defense your systems:

The best way to start is to get Ad-Aware 6.0, Build 181 or later, here:
http://www.lavasoftusa.com/support/download/. Update and run this regularly
to get rid of most "spyware/hijackware" on your machine. If it has to fix
things, be sure to re-boot and rerun AdAware again and repeat this cycle
until you get a clean scan. The reason is that it may have to remove things
which are currently "in use" before it can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-b.../ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to re-boot
and rerun SpyBot again and repeat this cycle until you get a clean "no red"
scan. The reason is that SpyBot sometimes has to remove things which are
currently "in use" before it can then clean up others.

Lastly, you might want to consider installing the SpywareBlaster and
SpywareGuard here to help prevent this kind of thing from happening in the
future:

http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
memory load - but keep it updated) The latest version as of this writing
will prevent installation or prevent the malware from running if it is
already installed (currently 822 baddies), and it provides information and
fixit-links for a variety of parasites.
http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
install malware) Both Very Highly Recommended.



--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In news:3F7906AC.78BC@earthlink.net,
Paul B. <billingsleyNOSPAM@earthlink.net> typed:
> In Windows ME, these two "things" appear when I do CTRL-ALT-DEL and
> view the "Close Window"...
> Vrvqa
> Jsrz
> Then when I try to "End Task" on one of these, and again do
> CTRL-ALT-DEL, this one shows up...
> Czo6whmn
> Again, when I "End Task" on that one, it turns into these two...
> Pgowp
> Jfso2e5d
> and then this one shows up...
> Dwpo
>
> I mistakingly downloaded Grokster and got zapped with piles of Adware.
> I ran Ad-aware and Spybot (both) and they removed most of that trash.
> However, there still are problems with my system (such as can't open
> Windows Explorer properly) and othe irritating things.
>
> Anyone know how to remove them? Which files to delete?
> Thanks for any help.

[Paul B.]

Thanks Jim! I have been wrestling with this on and off for the past few
days. Your suggestions helped me clean my PC of this Adware/Spyware.

Thanks!


Jim Byrd wrote:
>
> Hi Paul - If you go to this page at Jim Eshelman's site, here:
> http://aumha.org/a/noads.htm and wait a little bit (be patient), an analysis
> of a number of possible parasites on your machine will be made to help you
> identify and remove them. NOTE: You will need to disable Ad Blocking in
> Zone Alarm 3.x, if present or any other Ad Blocking software which
> interferes with Java Scripting for this scan to work. You should get a
> message between the two lines of **** giving the results of the scan.
>
> From your description it's difficult to be sure just what might be left, and
> therefore to prescribe any specific actions. Do the following:
> Download HijackThis, free, here:
> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
>
> Unzip it to any convenient folder, start it then press Scan. Click on
> SaveLog when it's finished which will create hijackthis.log. Now click the
> Config button, then Misc Tools and click on Generate StartupList.log which
> will create Startuplist.txt
>
> Go to Spyware and Hijackware Removal Support, here:
> http://www.spywareinfo.com/forums/in...74&act=SF&f=11
>
> Sign in, then copy and paste both files into a message asking for
> assistance, Someone will answer with detailed instructions for the removal
> of your parasite(s).
>
> In addition to the above, if you don't already have them here are some
> things which will help you defense your systems:
>
> The best way to start is to get Ad-Aware 6.0, Build 181 or later, here:
> http://www.lavasoftusa.com/support/download/. Update and run this regularly
> to get rid of most "spyware/hijackware" on your machine. If it has to fix
> things, be sure to re-boot and rerun AdAware again and repeat this cycle
> until you get a clean scan. The reason is that it may have to remove things
> which are currently "in use" before it can then clean up others.
>
> Another excellent program for this purpose is SpyBot Search and Destroy
> available here: http://security.kolla.de/ SpyBot Support Forum here:
> http://www.net-integration.net/cgi-b.../ikonboard.cgi. I recommend
> using both normally. After fixing things with SpyBot S&D, be sure to re-boot
> and rerun SpyBot again and repeat this cycle until you get a clean "no red"
> scan. The reason is that SpyBot sometimes has to remove things which are
> currently "in use" before it can then clean up others.
>
> Lastly, you might want to consider installing the SpywareBlaster and
> SpywareGuard here to help prevent this kind of thing from happening in the
> future:
>
> http://www.wilderssecurity.com/spywareblaster.html (Prevents malware Active
> X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU or
> memory load - but keep it updated) The latest version as of this writing
> will prevent installation or prevent the malware from running if it is
> already installed (currently 822 baddies), and it provides information and
> fixit-links for a variety of parasites.
> http://www.wilderssecurity.net/spywareguard.html (Monitors for attempts to
> install malware) Both Very Highly Recommended.
>
> --
> Please respond in the same thread.
> Regards, Jim Byrd, MS-MVP
>
> In news:3F7906AC.78BC@earthlink.net,
> Paul B. <billingsleyNOSPAM@earthlink.net> typed:
> > In Windows ME, these two "things" appear when I do CTRL-ALT-DEL and
> > view the "Close Window"...
> > Vrvqa
> > Jsrz
> > Then when I try to "End Task" on one of these, and again do
> > CTRL-ALT-DEL, this one shows up...
> > Czo6whmn
> > Again, when I "End Task" on that one, it turns into these two...
> > Pgowp
> > Jfso2e5d
> > and then this one shows up...
> > Dwpo
> >
> > I mistakingly downloaded Grokster and got zapped with piles of Adware.
> > I ran Ad-aware and Spybot (both) and they removed most of that trash.
> > However, there still are problems with my system (such as can't open
> > Windows Explorer properly) and othe irritating things.
> >
> > Anyone know how to remove them? Which files to delete?
> > Thanks for any help.

[Jim Byrd]

YW, Paul - Glad you got it straightened out.

--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In news:3F80AE12.757C@earthlink.net,
Paul B. <billingsleyNOSPAM@earthlink.net> typed:
> Thanks Jim! I have been wrestling with this on and off for the past
> few
> days. Your suggestions helped me clean my PC of this Adware/Spyware.
>
> Thanks!
>
>
> Jim Byrd wrote:
>>
>> Hi Paul - If you go to this page at Jim Eshelman's site, here:
>> http://aumha.org/a/noads.htm and wait a little bit (be patient), an
>> analysis
>> of a number of possible parasites on your machine will be made to
>> help you
>> identify and remove them. NOTE: You will need to disable Ad
>> Blocking in
>> Zone Alarm 3.x, if present or any other Ad Blocking software which
>> interferes with Java Scripting for this scan to work. You should
>> get a
>> message between the two lines of **** giving the results of the scan.
>>
>> From your description it's difficult to be sure just what might be
>> left, and
>> therefore to prescribe any specific actions. Do the following:
>> Download HijackThis, free, here:
>> http://www.spywareinfo.com/~merijn/files/hijackthis.zip
>>
>> Unzip it to any convenient folder, start it then press Scan. Click on
>> SaveLog when it's finished which will create hijackthis.log. Now
>> click the
>> Config button, then Misc Tools and click on Generate StartupList.log
>> which
>> will create Startuplist.txt
>>
>> Go to Spyware and Hijackware Removal Support, here:
>>
http://www.spywareinfo.com/forums/in...74&act=SF&f=11
>>
>> Sign in, then copy and paste both files into a message asking for
>> assistance, Someone will answer with detailed instructions for the
>> removal
>> of your parasite(s).
>>
>> In addition to the above, if you don't already have them here are
>> some
>> things which will help you defense your systems:
>>
>> The best way to start is to get Ad-Aware 6.0, Build 181 or later,
>> here: http://www.lavasoftusa.com/support/download/. Update and run
>> this regularly
>> to get rid of most "spyware/hijackware" on your machine. If it has
>> to fix
>> things, be sure to re-boot and rerun AdAware again and repeat this
>> cycle
>> until you get a clean scan. The reason is that it may have to remove
>> things
>> which are currently "in use" before it can then clean up others.
>>
>> Another excellent program for this purpose is SpyBot Search and
>> Destroy
>> available here: http://security.kolla.de/ SpyBot Support Forum here:
>> http://www.net-integration.net/cgi-b.../ikonboard.cgi. I
>> recommend
>> using both normally. After fixing things with SpyBot S&D, be sure to
>> re-boot
>> and rerun SpyBot again and repeat this cycle until you get a clean
>> "no red"
>> scan. The reason is that SpyBot sometimes has to remove things which
>> are
>> currently "in use" before it can then clean up others.
>>
>> Lastly, you might want to consider installing the SpywareBlaster and
>> SpywareGuard here to help prevent this kind of thing from happening
>> in the
>> future:
>>
>> http://www.wilderssecurity.com/spywareblaster.html (Prevents malware
>> Active
>> X installs) (BTW, SpyWare Blaster is not memory resident ... no CPU
>> or
>> memory load - but keep it updated) The latest version as of this
>> writing
>> will prevent installation or prevent the malware from running if it
>> is
>> already installed (currently 822 baddies), and it provides
>> information and
>> fixit-links for a variety of parasites.
>> http://www.wilderssecurity.net/spywareguard.html (Monitors for
>> attempts to
>> install malware) Both Very Highly Recommended.
>>
>> --
>> Please respond in the same thread.
>> Regards, Jim Byrd, MS-MVP
>>
>> In news:3F7906AC.78BC@earthlink.net,
>> Paul B. <billingsleyNOSPAM@earthlink.net> typed:
>>> In Windows ME, these two "things" appear when I do CTRL-ALT-DEL and
>>> view the "Close Window"...
>>> Vrvqa
>>> Jsrz
>>> Then when I try to "End Task" on one of these, and again do
>>> CTRL-ALT-DEL, this one shows up...
>>> Czo6whmn
>>> Again, when I "End Task" on that one, it turns into these two...
>>> Pgowp
>>> Jfso2e5d
>>> and then this one shows up...
>>> Dwpo
>>>
>>> I mistakingly downloaded Grokster and got zapped with piles of
>>> Adware.
>>> I ran Ad-aware and Spybot (both) and they removed most of that
>>> trash.
>>> However, there still are problems with my system (such as can't open
>>> Windows Explorer properly) and othe irritating things.
>>>
>>> Anyone know how to remove them? Which files to delete?
>>> Thanks for any help.

[No Body]

Better yet, using IE, go to www.doxdesk.com and click on parasite. It
is NOT all inclusive, but it WILL give you a look at some of what can
be IDd.

Otherwise, go pick up a copy of Spybot at http://security.kolla.de or a
copy of AdAware at http://www.lavasoft.de.

And use KaZaA Lite to avoid the adware in the future ...

Paul B. (billingsleyNOSPAM@earthlink.net) coughed and hacked and
finally donated this cute little hairball:
news:3F7906AC.78BC@earthlink.net:

> In Windows ME, these two "things" appear when I do CTRL-ALT-DEL
> and view the "Close Window"...
> Vrvqa
> Jsrz
> Then when I try to "End Task" on one of these, and again do
> CTRL-ALT-DEL, this one shows up...
> Czo6whmn
> Again, when I "End Task" on that one, it turns into these two...
> Pgowp
> Jfso2e5d
> and then this one shows up...
> Dwpo
>
> I mistakingly downloaded Grokster and got zapped with piles of
> Adware. I ran Ad-aware and Spybot (both) and they removed most of
> that trash. However, there still are problems with my system (such
> as can't open Windows Explorer properly) and othe irritating
> things.
>
> Anyone know how to remove them? Which files to delete?
> Thanks for any help.

[Jerry]

Hey Paul,
Here's my 2 cents.
Go to:
sygatetech.com
Use their free Stealth and Trojan scans to check your PC.
You may have to disable any software firewall you have in use.
Jerry

"Paul B." <billingsleyNOSPAM@earthlink.net> wrote in message
news:3F7906AC.78BC@earthlink.net...
> In Windows ME, these two "things" appear when I do CTRL-ALT-DEL and view
> the "Close Window"...
> Vrvqa
> Jsrz
> Then when I try to "End Task" on one of these, and again do
> CTRL-ALT-DEL, this one shows up...
> Czo6whmn
> Again, when I "End Task" on that one, it turns into these two...
> Pgowp
> Jfso2e5d
> and then this one shows up...
> Dwpo
>
> I mistakingly downloaded Grokster and got zapped with piles of Adware.
> I ran Ad-aware and Spybot (both) and they removed most of that trash.
> However, there still are problems with my system (such as can't open
> Windows Explorer properly) and othe irritating things.
>
> Anyone know how to remove them? Which files to delete?
> Thanks for any help.