UnSpyPC and WareOut - now nothing works and cannot find anything!

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

A friend (no really!) has a PC which does almost nothing, usually giving the
message "Windows cannot find XXX. Make sure you type the name correctly..."
etc.
I found he has UnSpyPC.exe and WareOut.exe on there which I've since
learned are malware masquerading as anti-malware! (and gives false positives
and may damage legitimate software). Web advice I've seen so far suggests
using Add/Remove to get rid of them, reboot and then tidy up any DLL, TMP etc.
However, he can't run Add/Remove! We can't even use Windows Explorer - XP
says it cannot find it. Search cannot find things either.
Help! Any ideas ? Does he need to reload the whole of XP, losing
everything on there ? (I think he doesn't have any System Restore points as
he's not had the PC very long.) Nothing seems to work even in Safe Mode and
we've tried running the NAV CD but that doesn't fix anything. Thanks, Gerry
:o)
 
From: "GerryP777" <[email protected]>

| A friend (no really!) has a PC which does almost nothing, usually giving the
| message "Windows cannot find XXX. Make sure you type the name correctly..."
| etc.
| I found he has UnSpyPC.exe and WareOut.exe on there which I've since
| learned are malware masquerading as anti-malware! (and gives false positives
| and may damage legitimate software). Web advice I've seen so far suggests
| using Add/Remove to get rid of them, reboot and then tidy up any DLL, TMP etc.
| However, he can't run Add/Remove! We can't even use Windows Explorer - XP
| says it cannot find it. Search cannot find things either.
| Help! Any ideas ? Does he need to reload the whole of XP, losing
| everything on there ? (I think he doesn't have any System Restore points as
| he's not had the PC very long.) Nothing seems to work even in Safe Mode and
| we've tried running the NAV CD but that doesn't fix anything. Thanks, Gerry
| :o)

Spyware Warrior lists Rogue anti spyware applications
http://www.spywarewarrior.com/rogue_anti-spyware.htm

It also will show legitimate ones as well.

Please download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm
 
Hi Dave,

Thanks for that. The biggest problem though is that the PC will do almost
nothing. I can't get it to run anything e.g. HijackThis or even to run
something off the floppy drive. D'you think it's really deleted basic stuff
like explorer, regedit etc. or simply cannot find/access them ?
What can I do to get it back far enough to download the other stuff you
suggest ?
(btw, it already had NAV and Spybot installed and running - though not sure
if they were really up-to-date)
Thanks, Gerry :o)
______________________________________ "David H. Lipman" wrote:
Spyware Warrior lists Rogue anti spyware applications
http://www.spywarewarrior.com/rogue_anti-spyware.htm
It also will show legitimate ones as well.

Please download, install and update the following software...
Ad-aware SE v1.06 http://www.lavasoft.de/ http://www.lavasoftusa.com/
SpyBot Search and Destroy v1.4 http://security.kolla.de/
Click to expand...

After the software is updated, I suggest scanning the system in Safe Mode.
I also suggest downloading, installing and updating BHODemon for any
Browser Helper Objects that may be on the PC. BHODemon
http://www.definitivesolutions.com/bhodemon.htm
 
From: "GerryP777" <[email protected]>

| Hi Dave,
|
| Thanks for that. The biggest problem though is that the PC will do almost
| nothing. I can't get it to run anything e.g. HijackThis or even to run
| something off the floppy drive. D'you think it's really deleted basic stuff
| like explorer, regedit etc. or simply cannot find/access them ?
| What can I do to get it back far enough to download the other stuff you
| suggest ?
| (btw, it already had NAV and Spybot installed and running - though not sure
| if they were really up-to-date)
| Thanks, Gerry :o)


Well... Sometimes there is nothing left to to but create a Ghost image of the platform,
wipe the PC, reinstall the OS and then restore data from the Ghost image. Then of course
install SP2 and all post SP2 critical and other updates.
 
Back
Top