Spyware Forum

[GK]

** Because after we "reset the browser button"
(tools/options/programs-reset web settings) it didn't show up again in
Adaware or Spybot.

How is it that you thought or



** Spybot found something called "Secret-Crush" but couldn't remove it as it
said it was currently in Memory, and so I rebooted. After the reboot Spybot
again found it but it was again in memory and couldn't be removed. Someone
sent us to a "bug website" and we followed their directions and "reset" the
browser button.

I thought you said



** YES! Start.exe was the LAST thing on the string or tree.... they all
looked like this in Spybots report:

Secret-Crush: Autostart Item (file fixing failed) C:\Documents and
Settings\Local Service\Start Menu\Startup\\start.exe

There were about 20 more - all very similar. All starting with
Secret-Crush and all ending in \\start.exe.

FS.........

Okay, here's the thing. I was under the impression that your anti-spyware
was still identifying start.exe as a problem file. From what you are saying,
it sounds like you were clean after a scan when start.exe existed before
you removed it. Therefore, it's possible it could be a legit 3rd party file,
although I'm quite certain it's not a XP Home file of any kind. For the record,
it appears it could be an install file, simply by looking at the folder name
SMINST. The INST part being a clue.

Soooo...... you may want to restore it. If you scanned with both Adaware and
Spybot S&D prior to deletion and neither app found it, it's possible
(if not likely) it's a good file. But, it also may not serve any purpose
either. I'd be curious about the properties of the file, date created, etc.

I apologize for this misunderstanding , but I thought you were getting positive
scans for this parasite just prior to removal.

Anyway, I enjoyed sharing the challenge with you, FS.

 

[~ Free Spirit ~]

Okay, here's the thing. I was under the impression that your anti-spyware
was still identifying start.exe as a problem file. From what you are saying,
it sounds like you were clean after a scan when start.exe existed before
you removed it.

** Yes. I don't know what the connection is or was between Secret-Crush and
start.exe. But I'm oming up clean since hitting that web-reset button.

Therefore, it's possible it could be a legit 3rd party file,

although I'm quite certain it's not a XP Home file of any kind. For the record,
it appears it could be an install file, simply by looking at the folder name
SMINST. The INST part being a clue.
Soooo...... you may want to restore it.

** I just did.

If you scanned with both Adaware and

Spybot S&D prior to deletion and neither app found it, it's possible
(if not likely) it's a good file. But, it also may not serve any purpose
either. I'd be curious about the properties of the file, date created,

etc.

** The SMINST folder itself (taken from Properties) is 1.17 MB and contains
26 files created 4/10/03 which is almost 4 months BEFORE I bought this PC
new at CompUSA.
The properties on start.exe are = it's 256 KBs and was created 4/10/03 at
the same time as the above folder. It says it was modified on 1/29/03.

I apologize for this misunderstanding , but I thought you were getting positive
scans for this parasite just prior to removal.

** That's ok. It's not always easy to explain things in print like over the
phone.

Anyway, I enjoyed sharing the challenge with you, FS.

** LOL!!! It certainly WAS a challenge. Part of what makes computers and
the Internet so interesting.

FS........

 

[Guest]

check out this url for info and removal info about secret crus

http://www.kephyr.com/spywarescanner/library/secretcrush/index.phtm

----- ~ Free Spirit ~ wrote: ----

I did register but don't understand how to use a Forum. I can't locate an
information there concerning Spybot "Not Responding" locking up, failing t
download the new files, or inability to remove Secret-Crush - which it say
is in MEMORY and can't be removed. A reboot and re-run still can't remov
it. I've re-installed Spybot several times from different mirror sites an
the exact same problems occur

Does anyone know what Secret-Crush is? A Google search last night brough
up no info on worms, scum-ware etc

FS..........

 

[Guest]

A: Top Posters in forums because you have to scroll up and down the page to see what they're replying to.


Q: What's the most annoying thing on the internet ?



----- David Candy wrote: -----

In c:\windws\system32\retore and is called rstrui.exe

 

[Its only me]

If you read the subject line, you should be able to see what the topic is
already. Are you dumb? When you click on reply group, the cursor is
automatically placed at the TOP of the message, isn't it?

A: Top Posters in forums because you have to scroll up and down the page

to see what they're replying to.

 

[Its only me]

I see that has you speechless. That's how it
works....................BIGMOUTH