Help - Recurring Spyware

[DeeKay]

Installed AntiSpyware. I keep running it offline. And
the following happens:

1- it finds eXact.Downloader (Trojan Downloader)
eXact.BargainBuddy and "IEPlugin"

2- When I select "remove", the first strange thing
happens: a pop-up says: Internet Explorer is currently
running"... need to close it before going forward... I
click on YES to close it.

This is strange as IE is not open.

3- it successfully removes the files. supposedly.

4- then when i run it again, it again finds the same ones
as mentioned above. it never deletes them, it seems.

Has anyone else had the same issue? Does anyone know what
to do about it? Thanks in advance for your help! d

 

[Ron Chamberlin]

Hi DK,

Boot into Safe Mode (F8) at startup;
Empty your temporary files AND your Temporary Internet Files C:\Documents
and Settings\Username\Local Settings\Temporary Internet Files folder ;
Run the scan while in safe mode;
If you are running SP2, open IE--->Tools--->Manage Add-ons, and uncheck any
BHO's that you don't recognize.

Ron Chamberlin
MS-MVP

 

[al anon]

did it work dk?

-----Original Message-----
Hi DK,

Boot into Safe Mode (F8) at startup;
Empty your temporary files AND your Temporary Internet Files C:\Documents
and Settings\Username\Local Settings\Temporary Internet Files folder ;
Run the scan while in safe mode;
If you are running SP2, open IE--->Tools--->Manage Add- ons, and uncheck any
BHO's that you don't recognize.

Ron Chamberlin
MS-MVP






.

 

[husam]

hi,

i have the same problem and i did all of the steps, what Ron Chamberlin said

and the eXact.bargainbuddy still appears in MS Anti Spyware

and here is the location of the stored signatures of ( eXact.bargainbuddy ) :

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ZESOFT\Enum

pic:
http://jeddah-sport-cars.matts-stuff.com/upload/Uploaded Files/reg.PNG



Some1 please help us

Thanx

 

[husam]

Anybody ?

 

[husam]

why this forum is so slow?

this is the worst PC FORUM ever

 

[husam]

 

[husam]

 

[husam]

is this forum dead?

where are the ****ing admins and mods?

 

[husam]

*

 

[husam]

hellooooooooooooooooooo

 

[husam]

helloooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

 

[husam]

10 posts WOHOOOOOOOOOOO

 

[husam]

11

 

[husam]

12

 

[husam]

13

 

[husam]

no one can BANN me

 

[husam]

cuz there is no one here

 

[husam]

waaaaaaaaaaaaaaa HAHAHAHAHAHAHA

 

[husam]

waaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa HAHAHAHAHAHAHAHAHAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA


waaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
HAHAHAHAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA