Need Help

[Nicolette]

Hi Judy,

Thanks--I am not sure about the AceSpy. I know I didn't download and buy it. The only people using this computer are me and my husband. My husband is more computer illiterate than I am and says he didn't do that either. Some random people that have visited our home have used our pc. If someone is paying to see what is done on this computer, their money is not well spent because we do pretty boring things on the computer like use it for work.
I did the eset online scanner again and attached the results. I attached 2 results because there were 2 logs in the folder and wasn't sure which one to choose.
Thanks,
Nicolette

[jholland1964]

Ok Nicolette, one thing you have to do concerning the AceSpy program is make sure it is gone so you need to search for it this way;

Double Click My Computer.
Then Double Click "C" Drive.
Then go to the Windows Folder, double click to open.
Then to the system32 folder, double click to open.
Then look for an Acer folder. If you find one, delete it all the way out.

Next go back to the ESET Online Scanner
and run it again, but this time Be sure the option to Remove found threats is checked. Because this time we want it to remove the Win32/Adware.Mirar that was found on the previous scan and the option to Scan unwanted applications is Checked.
When you have completed that scan, a scanlog ought to have been created and located at C:\\Program Files\\EsetOnlineScanner\\log.txt. Please post that log for us.
Also please run a new HJT scan and post that new log along with the ESET log in your next post.

[Nicolette]

Hi Judy,

I deleted the requested folder. It was called AceSpy and then I emptied my recycle bin.

I also did the ESET scan and attached files and another HJT scan and attached the file.

Thanks so much!
Nicolette

[jholland1964]

Nicolette, am questioning another program here before I give you more steps...it is called GoToMyPc...do you know what this is and did you install it yourself? It IS a legitimate program which allows remote access of your computer by another OR remote access of another computer by you. I am questioning this because it has been known to have security issues and because of the fact that the AceSpy program was found to be on your computer...and you say neither you nor your husband knows how it got there, this is why I am suspicious of this other program also.

[Nicolette]

Hi Judy,

I personally installed gotomypc probably 3 years ago? In addition to working for directv, I also do consultant work for a company located in another state. I used to work there myself, but then had to move and they kept me on their payroll and I can access their databases and so forth thru gotomypc.

I wasn't aware of the security issues. They used to use pc anywhere and then transitioned to the gotomypc because of known security issues.

Thanks,
Nicolette

[PhilliePhan]

Hi Nicollette,

I am going to post a script for you to run with ComboFix, but I won't be able to do it until this evening.

In the meantime, could you please post an Uninstall list. You can get this via HJT's misc tools section.

Cheers
PP

[Nicolette]

Hi Nicollette,

I am going to post a script for you to run with ComboFix, but I won't be able to do it until this evening.

In the meantime, could you please post an Uninstall list. You can get this via HJT's misc tools section.

Cheers
PP

PP,

I can't find the uninstall list. I looked at the stickys and didn't see a misc tools. Can you please tell me more info?

Thanks,
Nicolette