Removing a Spyware program

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I downloaded AdwareAlert and ran it. It has some problems and will not run
correctly. I have been trying to remove it, but it stops everytime at the
following: "Cannot stop antispyfilter" open service, access is denied.
Adware personnel are of little or no use. They have sent me a cmd program
that does not work. I have attempted to use the cmd function "sc stop
antispyfilter", but it comes back with, "open service, failed 5: access is
denied".
 
Hi

Capt P. F. Voshell said:
I downloaded AdwareAlert and ran it. It has some problems and will not run
correctly. I have been trying to remove it, but it stops everytime at the
following: "Cannot stop antispyfilter" open service, access is denied.
Adware personnel are of little or no use. They have sent me a cmd program
that does not work. I have attempted to use the cmd function "sc stop
antispyfilter", but it comes back with, "open service, failed 5: access is
denied".
Click to expand...

Did you run the cmd function as administrator ?
 
Capt said:
I downloaded AdwareAlert and ran it. It has some problems and will not run
correctly. I have been trying to remove it, but it stops everytime at the
following: "Cannot stop antispyfilter" open service, access is denied.
Adware personnel are of little or no use. They have sent me a cmd program
that does not work. I have attempted to use the cmd function "sc stop
antispyfilter", but it comes back with, "open service, failed 5: access is
denied".
Click to expand...

You are infected with some version of the Virtumonde trojan which you
got when you downloaded and installed a rogue antispyware program.

Because you have Vista, not all removal tools/techniques will work for
you. A better solution is for you to go to one of the specialty forums
listed below (in no particular order) to get guided expert help.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 -
another tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement
and the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html

And for future reference, Safe Hex:

http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://www.getsafeonline.org/
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron/archive/2006/02/05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs


Malke
 
I should be at administrator level. I don't know how to change it from
(c:\users\phil)
 
Even if you have an administrator account, you don't any more power than a
normal user.

To run the program, first open a cmd window, with elevated authority.
Start - All Programs - Accessories
right-click on Command Prompt, select "Run as Administrator"

now run the command they told you to.
 
I think Malke hit it on the head.
I was able to remove antispyfilter by booting in protected w/o drivers.
After take, I removed the program with ms removal.
I still think I have some sort of application (Virtumondo), but as to yet
have not been able to identify and find.
Thanks for your help.
 
Back
Top