DIALER INSTALLED WITHOUT CONSENT

  • Thread starter Thread starter Guest
  • Start date Start date
--
If you are under attack and MSAS does not seem to help:

*Submit suspected spyware report in the tools menu of MSAS*

*Here is an excellent page showing you how to kill off spyware!*
http://tinyurl.com/awnad (smitfraud, in this case)

*Symantec Adware/Spyware removal tools:*
http://tinyurl.com/5y9cx

PREP YOUR MACHINE FIRST!
- IF you are using Spybot S/D, UN-Immunize your computer
- IF you are using Adaware, turn off AD-Watch
- Disable all other active anti-spy applications
- Dump all temporary file locations and Internet files

1. Download:
lspfix.exe www.cexx.org/lspfix.htm
winsockxpfix.exe www.snapfiles.com/get/winsockxpfix.html
ccleaner.exe www.ccleaner.com
killbox.exe www.bleepingcomputer.com/files/killbox.php

2. Clean out all temp file locations with ccleaner.exe

3. Install and use killbox to delete stubborn files

4. Reboot into safe mode - http://tinyurl.com/pfca
5. Run MSAS at least twice in full/deep mode
6. Run a robust, updated antivirus software scan
7. Reboot into normal mode,see if problem has been corrected

8. If you think something is there but can't see it, download:
- Blacklight by F-Secure
www.europe.f-secure.com/exclude/blacklight/blbeta.exe
- RootKitRevealer by SysInternals
www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml

9. If your problem is Virus or Security patch related:
In the United States or Canada, call 1-866-PCSAFETY
MS will provide free support for those issues.

Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy

- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
http://support.microsoft.com/kb/811259
LSPFix - www.cexx.org/lspfix.htm
Winsockxpfix - www.snapfiles.com/get/winsockxpfix.html

- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx

Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware
4) If that fails, install VB6 runtime files:
http://www.softwarepatch.com/windows/vbrun6download.htm

- To report false positives:
www.microsoft.com/athome/security/spyware/software/isv/fpform.aspx
- To submit disputes or requests:
www.microsoft.com/athome/security/spyware/software/isv/cdform.aspx
- To learn more about how MS analyzes suspected spyware:
www.microsoft.com/athome/security/spyware/software/isv/analysis.mspx
- To Run MSAS in passive mode:
http://support.microsoft.com/kb/892375

Alternative Anti-Spyware Applications:
- Spybot Search and Destroy
http://www.majorgeeks.com/download2471.html
- LavaSoft AdAware
http://www.majorgeeks.com/download506.html
- AdAware VX2 Cleaner Plugin
http://www.majorgeeks.com/download4283.html
- PestPatrol
http://www.majorgeeks.com/download1187.html
- Webroot Spysweeper
http://www.majorgeeks.com/download3263.html
- Ewido Security Suite
http://www.ewido.net/en/
- CounterSpy (Same Giant Company Engine as MSAS)
http://www.sunbelt-software.com
- A Squared Free
http://www.emsisoft.com/en/software/free/


Recommended Software to help protect you:
- Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/default.mspx
- SpywareBlaster
http://www.javacoolsoftware.com
- Outpost Firewall Pro
http://www.agnitum.com/products/outpost
---------------------------------------------
 
No Offence to the person who posted them links to
NoAdware and Xoftspy but in my view all the links on the
page you posted are Rogue Products that would probably
cause alot more problems than they solve , use trusted
products like Spybot S&D/MS Antispy or Ad-Aware SE Then
Antivirus Scans if you have a Antivirus product installed

If you have a dialer or other malware installed you are
best using Virus Scans as there may be registry run
commands for the Dialer plus the Registry commands to
make it dial out when IE starts to a Premium Rate
Number.Here's some online scanners you could use if your
Internet is working ok ,I cant really comment on your
current dial out number and if this is malicious or your
ISP but your Internet Providers could answer that for you
and would let you know if its been changed



Online Scanners :


Trend Micro

http://housecall.antivirus.com/

Panda

http://www.pandasoftware.com/activescan/

Bitdefender

http://www.bitdefender.com/scan/Msie/index.php


Symantecs Security Check & Virus scanner

http://security.symantec.com/default.asp?
productid=symhome&langid=ie&venid=sym



Alternative Spyware Removers:


SpyBot Search & Destroy

http://fileforum.betanews.com/download/Spybot_Search_and_D
estroy/1043809773/1


Ad-Aware SE

http://www.download.com/3000-2144-10045910.html




If you can find out what the dialer is by using the
online scans it will make it easier to check for any
files that may exist, if they detect a Dialer they should
fix the entries for you anyway to save you having to
search for the files.

Regards


Andy
 
I think that there are spyware trolls starting to post their bogus
information in these groups. I have seen some bad info going out lately.
 
Back
Top