Not removing spyware completely

[Guest]

Hi,
I'm having a problem with a piece of spyware called
irvzz.exe that keeps reinstalling itself on my computer.
MS-antispyware just recently started detecting it (i was
removing it manually before). Anyhow i've tried running
it in safe mode, rebooting exactly as told, etc. and it
keeps coming back.

Any idea on how to permanently get rid of it?

 

[D@annyBoy]

try booting into safe mode and run a full scan

--

D@nnyBoy
Have you tried posting your problems
not related to MS AntiSpyware to
news://msnews.microsoft.com

and please don't bother to send me private mail
because I don't check my mailbox regularly

 

[Guest]

In my first posting i already said i booted into safe
mode and ran a fullthe scan. That didn't work.

 

[Steve Dodson [MSFT]]

Have you also run AV in safe mode? If so, can you submit a suspected spyware
report with the details so we can investigate? You can submit this report in
tools -> suspected spyware report.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

 

[Guest]

I ran it an AV in safe mode with mcafee earlier and it
didn't find it. Recently i ran it again, with mcaffee,
and it found and fixed the problem so far. Im guessing it
was a new spyware/trojan, and it took a while for Mcafee
to add it to there signature files. Anyhow the problems
been gone for a few days, so i think its fixed.

Thanks for the help anyway. If it comes back, i'll let
you know.

-----Original Message-----
Have you also run AV in safe mode? If so, can you submit a suspected spyware
report with the details so we can investigate? You can submit this report in
tools -> suspected spyware report.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

In my first posting i already said i booted into safe
mode and ran a fullthe scan. That didn't work.

.

 

[D@annyBoy]

how would I know you that you have already booted ino safe mode and ran a
full scan and it didn't work?

--

D@nnyBoy
Have you tried posting your problems
not related to MS AntiSpyware to
news://msnews.microsoft.com

and please don't bother to send me private mail
because I don't check my mailbox regularly

 

[Guest]

Crap its back again. Grrrr i really need to get rid of
this, its driving me crazy.

-----Original Message-----
I ran it an AV in safe mode with mcafee earlier and it
didn't find it. Recently i ran it again, with mcaffee,
and it found and fixed the problem so far. Im guessing it
was a new spyware/trojan, and it took a while for Mcafee
to add it to there signature files. Anyhow the problems
been gone for a few days, so i think its fixed.

Thanks for the help anyway. If it comes back, i'll let
you know.

-----Original Message-----
Have you also run AV in safe mode? If so, can you

submit
a suspected spyware

report with the details so we can investigate? You can submit this report in
tools -> suspected spyware report.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

and
confers no rights.

Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.

and

it


.

.

 

[Bill Sanderson]

besides the name (this doesn't change?) what are the symptoms?

Have you searched the registry for that name?

--
FAQ for Microsoft Antispyware:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.htm

Crap its back again. Grrrr i really need to get rid of
this, its driving me crazy.

-----Original Message-----
I ran it an AV in safe mode with mcafee earlier and it
didn't find it. Recently i ran it again, with mcaffee,
and it found and fixed the problem so far. Im guessing it
was a new spyware/trojan, and it took a while for Mcafee
to add it to there signature files. Anyhow the problems
been gone for a few days, so i think its fixed.

Thanks for the help anyway. If it comes back, i'll let
you know.

-----Original Message-----
Have you also run AV in safe mode? If so, can you

submit
a suspected spyware

report with the details so we can investigate? You can submit this report in
tools -> suspected spyware report.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

and
confers no rights.

Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
In my first posting i already said i booted into safe
mode and ran a fullthe scan. That didn't work.

-----Original Message-----
try booting into safe mode and run a full scan


and please don't bother to send me private mail
because I don't check my mailbox regularly


Hi,
I'm having a problem with a piece of spyware called
irvzz.exe that keeps reinstalling itself on my
computer.
MS-antispyware just recently started detecting it (i
was
removing it manually before). Anyhow i've tried running
it in safe mode, rebooting exactly as told, etc.

and

it
keeps coming back.

Any idea on how to permanently get rid of it?


.



.

.

 

[JohnF.]

reboot into safe mode
clean out all temporary file locations (www.ccleaner.com)
dump internet temporary files
run scans in MSAS and AV
Reboot in normal mode and test.

If still not gone, disable System Restore and then repeat above process.

JohnF.

Crap its back again. Grrrr i really need to get rid of
this, its driving me crazy.

-----Original Message-----
I ran it an AV in safe mode with mcafee earlier and it
didn't find it. Recently i ran it again, with mcaffee,
and it found and fixed the problem so far. Im guessing it
was a new spyware/trojan, and it took a while for Mcafee
to add it to there signature files. Anyhow the problems
been gone for a few days, so i think its fixed.

Thanks for the help anyway. If it comes back, i'll let
you know.

-----Original Message-----
Have you also run AV in safe mode? If so, can you

submit
a suspected spyware

report with the details so we can investigate? You can submit this report in
tools -> suspected spyware report.

--
-steve

Steve Dodson [MSFT]
MCSE, CISSP
PSS Security

and
confers no rights.

Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
In my first posting i already said i booted into safe
mode and ran a fullthe scan. That didn't work.

-----Original Message-----
try booting into safe mode and run a full scan


and please don't bother to send me private mail
because I don't check my mailbox regularly


Hi,
I'm having a problem with a piece of spyware called
irvzz.exe that keeps reinstalling itself on my
computer.
MS-antispyware just recently started detecting it (i
was
removing it manually before). Anyhow i've tried running
it in safe mode, rebooting exactly as told, etc.

and

it
keeps coming back.

Any idea on how to permanently get rid of it?


.



.

.