Help please .....spyware wizard problem.

[Sandy (Idaho Ghost)]

Hello
I have a friend who has spyware wizard on her pc. When ever she
boots up, she gets porno. She has tried to remove it without
success.

winXP

Any help will be greatly appreciated. I am downloading Trend Micro's
Sysclean now (not sure how to use this). I will install Spybot,
Ad-aware and Spywareblaster if I ever get it cleaned.
TIA
Sandy

[David H. Lipman]

From: "Sandy (Idaho Ghost)" <sjr619.no.spam.ever.@netboise.com>

| Hello
| I have a friend who has spyware wizard on her pc. When ever she
| boots up, she gets porno. She has tried to remove it without
| success.
|
| winXP
|
| Any help will be greatly appreciated. I am downloading Trend Micro's
| Sysclean now (not sure how to use this). I will install Spybot,
| Ad-aware and Spywareblaster if I ever get it cleaned.
| TIA
| Sandy

Add to your list SuperAntiSpyware.
http://www.superantispyware.com/supe...freevspro.html

You can also use the following Multi AV Scanning Tool. It includes a simple front-end to
Trend Micro's Sysclean utility.


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *



--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Gimpy]

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:G8Ghh.2348$Jb6.406@trnddc03...
> From: "Sandy (Idaho Ghost)" <sjr619.no.spam.ever.@netboise.com>
>
> | Hello
> | I have a friend who has spyware wizard on her pc. When ever she
> | boots up, she gets porno. She has tried to remove it without
> | success.
> |
> | winXP
> |
> | Any help will be greatly appreciated. I am downloading Trend Micro's
> | Sysclean now (not sure how to use this). I will install Spybot,
> | Ad-aware and Spywareblaster if I ever get it cleaned.
> | TIA
> | Sandy
>
> Add to your list SuperAntiSpyware.
> http://www.superantispyware.com/supe...freevspro.html


> Tried to download this one David but all the "free" download sites come
> up page can't be displayed ?? Gimpy



> You can also use the following Multi AV Scanning Tool. It includes a
> simple front-end to
> Trend Micro's Sysclean utility.
>
>
> Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to
> go through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
> Normal Mode.
> This way all the components can be downloaded from each AV vendor's web
> site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and
> Reboot the PC.
>
> You can choose to go to each menu item and just download the needed files
> or you can
> download the files and perform a scan in Normal Mode. Once you have
> downloaded the files
> needed for each scanner you want to use, you should reboot the PC into
> Safe Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want
> to run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal
> Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
> comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
>
> * * * Please report back your results * * *
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>

[shplink]

Gimpy wrote:
> "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> news:G8Ghh.2348$Jb6.406@trnddc03...
>
>>From: "Sandy (Idaho Ghost)" <sjr619.no.spam.ever.@netboise.com>
>>
>>| Hello
>>| I have a friend who has spyware wizard on her pc. When ever she
>>| boots up, she gets porno. She has tried to remove it without
>>| success.
>>|
>>| winXP
>>|
>>| Any help will be greatly appreciated. I am downloading Trend Micro's
>>| Sysclean now (not sure how to use this). I will install Spybot,
>>| Ad-aware and Spywareblaster if I ever get it cleaned.
>>| TIA
>>| Sandy
>>
>>Add to your list SuperAntiSpyware.
>>http://www.superantispyware.com/supe...freevspro.html
>
>
>
>> Tried to download this one David but all the "free" download sites come
>>up page can't be displayed ?? Gimpy
>
>
>
SNIP

You may want to download and save the SAS executable installer on a jump
drive or CD, using a "healthy" machine, and install on the infected box
that way.

--
the alt.privacy.spyware FAQ:
http://shplink.com/misc/FAQ.htm

[David H. Lipman]

From: "Gimpy" <Gimpy@yahoosix.net>

>> Tried to download this one David but all the "free" download sites come
>> up page can't be displayed ?? Gimpy
|


This is indicative of an active infection that is using self preservation to block access to
anti malware removal tools (assuming the PC can access the Internet OK in the first place).

As 'shplink' noted, you can download all the suggested utilities on a surrigate PC and and
place them on media that can be used on teh affected computer.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Φ Kwatu Φ]

Sandy (Idaho Ghost) wrote:
> Hello
> I have a friend who has spyware wizard on her pc. When ever she
> boots up, she gets porno. She has tried to remove it without
> success.
>
> winXP
>
> Any help will be greatly appreciated. I am downloading Trend Micro's
> Sysclean now (not sure how to use this). I will install Spybot,
> Ad-aware and Spywareblaster if I ever get it cleaned.
> TIA
> Sandy
>


Please ignore the replier known as PCBUTTS1 and do not trust the content
on the web site PCBUTTS1.Com

The personna PCBUTTS1 is much like the malware you are trying to get rid
of. It purports to be something that it is not.

He says he wants to help you but this is his mentality


http://www.pcbutts1.com/downloads/mpv.htm

http://www.pcbutts1.com/downloads/max.htm

http://www.pcbutts1.com/downloads/license.htm

http://www.pcbutts1.com/rlk/rlk.htm

http://www.pcbutts1.com/downloads/meatplow.htm

http://www.pcbutts1.com/downloads/pervert.htm

The following is only a small sampling about this "Rogue" person, a wolf
in sheep's clothes.

http://msmvps.com/blogs/spywaresucks...-the-plot.aspx


http://msmvps.com/blogs/spywaresucks...10/272921.aspx

http://forums.security-central.us/sh...ad.php?p=10097

http://www.atribune.org/Blog/?p=16

http://blog.subratam.org/?p=17

http://www.bleepingcomputer.com/secu...n-in-the-butt/


http://www.besttechie.net/2006/09/07...s1-back-at-it/

http://temerc.blogspot.com/2006/09/p...are-theif.html


Then do you own Google Search.

[pcbutts1]

You will also notice by reading here http://www.pcbutts1.com/downloads that
I speak the truth about the newsgroup trolls.


--


The best live web video on the internet http://www.seedsv.com/webdemo.htm
NEW Embedded system W/Linux. We now sell DVR cards.
See it all at http://www.seedsv.com/products.htm
Sharpvision simply the best http://www.seedsv.com



"Sandy (Idaho Ghost)" <sjr619.no.spam.ever.@netboise.com> wrote in message
news:4maeo2h37l9v47mf8n7vc7tqj98jlj206f@4ax.com...
> Hello
> I have a friend who has spyware wizard on her pc. When ever she
> boots up, she gets porno. She has tried to remove it without
> success.
>
> winXP
>
> Any help will be greatly appreciated. I am downloading Trend Micro's
> Sysclean now (not sure how to use this). I will install Spybot,
> Ad-aware and Spywareblaster if I ever get it cleaned.
> TIA
> Sandy
>

[Φ Kwatu Φ]

pcbutts1 wrote:
> You will also notice by reading here -snip- that
> I speak the truth about the newsgroup trolls.
>
>

Butts, you have no understanding of ethics, honesty or truth.

The truths are...

- You are a consummate liar.

- You are not and never have been a Microsoft MVP.

- You have stolen the code are/or utilities created by or worked on by;
Kelly, RACooper, Noahdfear, Miekiemoes, Swandog46, Winhelp2002, Stuart
and others.

- You have violated the intellectual property rights of software
creaters an/or vendors by hosting their property on your web site
without their expressed permission and have done so even after they have
asked you to remove them. You then publicly lied stating you were an
authorized mirror when you were not so authorized.

Such as...
http://ccollomb.free.fr/unlocker/#faq
- Is this website "http://www.pcbutts1.com/" authorised to distribute
Unlocker? No it is not.

- You search the net for problem solutions and then post those solutions
in forums and either infer you are the author or creator of that
information or outright state that you are the author or creator of that
information.

- You have slandered the good names of several well known and trusted
anti malware authors or forum helpers.

- You host pornographic and obscene material on your web site in your
slander attack of others.

- You impersonate people on the Microsoft forums to get past the fact
you were banned from posting as yourself. You also name shift and use
numerous sock puppets such as Sharon Franks. You have also impersonated
such people as Sharon F., PA Bear and Leythos to discredit them.

- You host no technical material on your fould web site and only post in
forums to spam the Seedsv.Com web site.

- You are male and not female as you are trying to falely portray.

- You are under investigation by the Alexandria office of Lockheed
Martin IT for contract and other violations.

- You work on the IT Help Desk at JPL NASA.

[pcbutts1]

Troll alert

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker,David H. Lipman, Max M Wachtell III aka
What's in a Name?,Fitz,
Rhonda Lea Kirk,Meat Plow, F Kwatu F, George Orwell



"? Kwatu ?" <kwai-fung.pei@invalid.chinanet.ch> wrote in message
news:em7idd$9gt$1@aioe.org...
> pcbutts1 wrote:
>> You will also notice by reading here -snip- that I speak the truth about
>> the newsgroup trolls.
>>
>>
>
> Butts, you have no understanding of ethics, honesty or truth.
>
> The truths are...
>
> - You are a consummate liar.
>
> - You are not and never have been a Microsoft MVP.
>
> - You have stolen the code are/or utilities created by or worked on by;
> Kelly, RACooper, Noahdfear, Miekiemoes, Swandog46, Winhelp2002, Stuart and
> others.
>
> - You have violated the intellectual property rights of software creaters
> an/or vendors by hosting their property on your web site without their
> expressed permission and have done so even after they have asked you to
> remove them. You then publicly lied stating you were an authorized mirror
> when you were not so authorized.
>
> Such as...
> http://ccollomb.free.fr/unlocker/#faq
> - Is this website "http://www.pcbutts1.com/" authorised to distribute
> Unlocker? No it is not.
>
> - You search the net for problem solutions and then post those solutions
> in forums and either infer you are the author or creator of that
> information or outright state that you are the author or creator of that
> information.
>
> - You have slandered the good names of several well known and trusted anti
> malware authors or forum helpers.
>
> - You host pornographic and obscene material on your web site in your
> slander attack of others.
>
> - You impersonate people on the Microsoft forums to get past the fact you
> were banned from posting as yourself. You also name shift and use
> numerous sock puppets such as Sharon Franks. You have also impersonated
> such people as Sharon F., PA Bear and Leythos to discredit them.
>
> - You host no technical material on your fould web site and only post in
> forums to spam the Seedsv.Com web site.
>
> - You are male and not female as you are trying to falely portray.
>
> - You are under investigation by the Alexandria office of Lockheed Martin
> IT for contract and other violations.
>
> - You work on the IT Help Desk at JPL NASA.
>
>

[cmsix]

"pcbutts1" <pcbutts1@****leythosthestalker.com> wrote in message
news:74adna2UQsHTwhrYnZ2dnUVZ_t-mnZ2d@giganews.com...
> Troll alert

Hello Kettle, it's pot on line two.

cmsix