SEP Adware will not uninstall

  • Thread starter Thread starter Curt Briscar
  • Start date Start date
C

Curt Briscar

I have run into some adware that I cant seem to get rid of.
Microsoft AntiSpyware identifies it and removed it but it keeps coming back.

I've looked for information but have not found any.

If you hve heard of it or had the ame problem let me know
_____________________________________
Name: SEP

Type: Adware

Threat Level: Severe

Description: SEP installs an Internet Explorer browser helper object and
toolbar.

Advise: This is a very high risk threat and should be removed immediately as
to prevent harm to your computer or your privacy.
 
Yes I have and it did not help. Adaware and Spybot did not detect it at
all.

Its part of another Adware called ESyndicate.

Below are the results
__________________________________--
SEP Adware more information...
Details: SEP installs an Internet Explorer browser helper object and
toolbar.
Status: Removed
Severe threat - Severe threats typically are remotely exploitable
vulnerabilities, which can lead to system compromise. Successful
exploitation does not normally require any interaction and exploits are in
the wild. There exists a high possibility of potential system damage or
security flaw. Attacker has complete control over your computer or install
new software on your machine.

Infected registry keys/values detected
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{C5183ABC-EB6E-4E05-B8C9-500A16B6CF94
_________________________________
Esyndicate Browser Plug-in more information...
Details: Browser Helper Object
Status: Removed
Elevated threat - Elevated threats are usually threats that fall into the
range of adware in which data about a user's habits are tracked and sent
back to a server for analysis without your consent or knowledge.

Infected files detected
c:\program files\esyndicate\esyn.dll
c:\program files\esyndicate\uninst.exe

Infected folders detected
c:\program files\esyndicate

Infected registry keys/values detected
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_CLASSES_ROOT\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_CLASSES_ROOT\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_CLASSES_ROOT\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_CLASSES_ROOT\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Esyn.Band.1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{CC378B83-9577-44D0-B4F8-0DD965E176FC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC378B83-9577-44D0-B4F8-0DD965E176FC}

_____________________________________________________
 
Have you tried running the uninst.exe located in that folder? I'd first
look in add/remove programs to see whether it is listed--it might well be.
 
Check

http://www.iamnotageek.com/a/sep.dll.php

You have another program by a different name that is
running and restoring the program. Try a progarm like
Hijackthis to see what is running. Alternately you could
check the program associations of the original file and
see what it tells you. Don't expect much here. The
programmer isn't likely to put this info in. Or, search on
McAfee or Symantec's site for the spyware name and see
what they tell you. Many times they have the information
about the other named file that is the real culpret.
This program need an info link built into it that would
give that info. I do know that you can submit the file to
McAfee and they will anylize it and let you know.
A little more help from MS is in order here. Especially if
they intend to charge for this some day like 8/1/2005.
 
Back
Top