Trojan.win32 adwareremover

Unknown
edited January 2008 in Spyware & Virus Removal
Hi, we are new here. I have a trojan.win32 adwareremover that my spyzooka found. I have done the following to remove it:

ran trendmicro internet security 14
shut off system restore
went into safe mode
ran spyzooka
deleted the trojan
rebooted
turned system restore back on
ran spyzooka once again and it is still there
I purchased spyhunter 3 which claimed it would get rid of this particular trojan and it did not. I called them and hopefully, they are going to credit my visa eventually.
Thanks,
JSTER:mad:

Comments

  • TroganTrogan London, UK
    edited January 2008
    Hello JSTER, and welcome to Icrontic!

    Spyzooka was known as a dubious program, see Here.

    SpyHunter was also known to be a dubious program, see Here.

    I would not trust either of these programs since there are many programs that are superior. I suggest you uninstall both these programs from Add/Remove programs in Control Panel.

    Lets see what is running on the PC...

    Download HJTInstall.exe to your Desktop.
    • Doubleclick HJTInstall.exe to install it.
    • By default it will install to C:\Program Files\Trend Micro\HijackThis .
    • Click on Install.
    • It will create a HijackThis icon on the desktop.
    • Once installed, it will launch Hijackthis.
    • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    • Save the log to a convenient location as you'll need to post it soon.
    • Don't use the Analyse This button, its findings are dangerous if misinterpreted.
    • Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
    Post the HijackThis log back here.
  • JSTER
    edited January 2008
    Trogan wrote: »
    Hello JSTER, and welcome to Icrontic!

    Spyzooka was known as a dubious program, see Here.

    SpyHunter was also known to be a dubious program, see Here.

    I would not trust either of these programs since there are many programs that are superior. I suggest you uninstall both these programs from Add/Remove programs in Control Panel.

    Lets see what is running on the PC...

    Download HJTInstall.exe to your Desktop.
    • Doubleclick HJTInstall.exe to install it.
    • By default it will install to C:\Program Files\Trend Micro\HijackThis .
    • Click on Install.
    • It will create a HijackThis icon on the desktop.
    • Once installed, it will launch Hijackthis.
    • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    • Save the log to a convenient location as you'll need to post it soon.
    • Don't use the Analyse This button, its findings are dangerous if misinterpreted.
    • Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
    Post the HijackThis log back here.
    Thanks so much for replying. I have heard some conflicting information on spyzooka, however; I had just purchased it and wanted to give it a chance a while back. I called for a refund for spyhunter, and will wait till they credit my visa....If not, I will be back on the phones. Thanks for this information and I will try it and post the results in the forum later today.
    Regards,
    jster
  • JSTER
    edited January 2008
    JSTER wrote: »
    Where are you located? We are in the midwest and it is only 4pm here. I wondered as a lot of these times are many hours ahead.

    Thanks again for your help
    JSTER
    Where are you located? We are in the midwest and it is only 4pm here. I wondered as a lot of these times are many hours ahead.

    Thanks again for your help
    JSTER
  • TroganTrogan London, UK
    edited January 2008
    From the UK (it says under my name). It is 10:05pm here.


    Click the reply.gif button when you want to reply instead of quoting. :)
  • JSTER
    edited January 2008
    Trogan wrote:
    Hello JSTER, and welcome to Icrontic!

    Spyzooka was known as a dubious program, see Here.

    SpyHunter was also known to be a dubious program, see Here.

    I would not trust either of these programs since there are many programs that are superior. I suggest you uninstall both these programs from Add/Remove programs in Control Panel.

    Lets see what is running on the PC...

    Download HJTInstall.exe to your Desktop.
    • Doubleclick HJTInstall.exe to install it.
    • By default it will install to C:\Program Files\Trend Micro\HijackThis .
    • Click on Install.
    • It will create a HijackThis icon on the desktop.
    • Once installed, it will launch Hijackthis.
    • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    • Save the log to a convenient location as you'll need to post it soon.
    • Don't use the Analyse This button, its findings are dangerous if misinterpreted.
    • Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
    Post the HijackThis log back here.


    Logfile of HijackThis v1.99.1
    Scan saved at 6:07:40 PM, on 1/7/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
    C:\WINDOWS\System32\alg.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
    C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
    C:\Program Files\Common Files\aol\1197415644\ee\aolsoftware.exe
    C:\Program Files\AOL 9.1\waol.exe
    C:\Program Files\AOL 9.1\shellmon.exe
    C:\Program Files\SpyZooka\spyzooka.exe
    C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
    C:\DOCUME~1\JIMMAG~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1197347641015
    O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    O20 - Winlogon Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: dlcf_device - - C:\WINDOWS\system32\dlcfcoms.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: GoToAssist - Unknown owner - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe" Start=service (file missing)
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
    O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
    O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
  • TroganTrogan London, UK
    edited January 2008
    Hi JSTER,

    You are using an older version of HijackThis. Please go to Add/Remove programs in Control Panel and uninstall HijackThis 1.99.1.

    Then, follow the instructions from my first post which will install the latest version. Post a log from that please.
  • JSTER
    edited January 2008
    Thanks, Getting Late Here, Working On This All Day, Very Upset.thanks So Much For Responding....i Will Do This Early Evening Tomorrow....
    Jster
  • BluePenguin15
    edited January 2008
    Hi Jster and Trogan,

    I'm Carl Haugen and I own BluePenguin Software, makers of SpyZooka.

    I would first like to comment on my product. You can see our Tucows 5 cow rating.

    And we are a Better Business Bureau Accredited Business


    Trogan - the link mentioned was posted almost 3 years ago by someone who works for a competitor of mine. I don't believe a negative comment from my competitor from 3 years ago is very relevant.

    JSTER - Please follow these directions and we'll give you a free update within 24 hours to remove your spyware:

    1. Open SpyZooka

    2. Click 'Start Scan'

    3. Choose 'Quick Scan' and click 'Scan'

    4. After the scan is complete click the 'Scan Report' tab.

    5. Enter your email address and click 'Send Report' If you are unable to send a report that way click 'Copy Report' and paste it on our help desk at the following link:
    http://www.spyzooka.com/cgi-bin/ttx.cgi

    Regards,
    Carl Haugen
    President
    BluePenguin Software
  • saburns
    edited January 2008
    Mr. Haugen,
    I am new to this forum, joined because of this specific issue, but have seen the same thing on all of my computers that I am running Spyzooka on. On the ones where I asked Spyzooka to remove the trojan it appeared that it worked but when I rebooted and did another scan it was still there. In addition when I told it to remove it the process "turned off" Spyzooka, Spysweeper, (yes, I do run multiple programs) and McAfee AV so they do not automatically start at Windows startup. Spyzooka and Spysweeper I can easily reenable but McAfee AV is still (pardon the technical term) hosed up. On PCs where I told Spyzooka to ignore the trojan when cleaning up I had no adverse effects.

    The issues I see are these:
    Is this a false positive?

    If so, this needs to be corrected ASAP since it affects other programs. It would also indicate that an update was not tested thoroughly before being released.

    If not, the cleanup proceduredure needs to be changed so that 1) it actually removes the program or notifies the user that Spyzooka cannot remove it, and 2) it does not affect other programs.

    Thanks
  • TroganTrogan London, UK
    edited January 2008
    Hello Carl,

    Thank you for taking the time to register and post regarding your product.

    The link I posted was to general information on Rogue/Suspect Anti-Spyware Products. I can strongly say that the people assiocated with SpywareWarrior have never been a competitor for anyone. I can also say that all products are tested throughly before the results are published.

    -Trogan
  • saburns
    edited January 2008
    Interesting. I ran AutoUpdate on SpyZooka this morning and ran a quick scan. It still showed the "trojan'. After Spyzooka tech support responded to an earlier email and said I wasn't running the newest version I reran AutoUpdate and it found updates that had been posted since this morning. When I reran the scan it no longer shows the "trojan". IMHO this was a false positive caused by a poorly tested update. Unfortunatly it impacted other programs that I consider to be critical. I haven't decided yet if I will remove Spyzooka from all of my systems or not. This type of issue makes me lose trust in a product's reliability.
  • JSTER
    edited January 2008
    Carl: I appreciate your input on this web site, however; I have written to you again last night and want a refund back for the two BluePenguin Software Spyzooka programs I purchased. They were $30.00 each. I do not need another update as I have done that already and it does not fix it. Thanks for standing behind your good reputation and membership in the BBB. Check your mail for my name and address to send me a check.
    JSTER

    BluePenguin15 wrote:
    Hi Jster and Trogan,

    I'm Carl Haugen and I own BluePenguin Software, makers of SpyZooka.

    I would first like to comment on my product. You can see our Tucows 5 cow rating.

    And we are a Better Business Bureau Accredited Business


    Trogan - the link mentioned was posted almost 3 years ago by someone who works for a competitor of mine. I don't believe a negative comment from my competitor from 3 years ago is very relevant.

    JSTER - Please follow these directions and we'll give you a free update within 24 hours to remove your spyware:

    1. Open SpyZooka

    2. Click 'Start Scan'

    3. Choose 'Quick Scan' and click 'Scan'

    4. After the scan is complete click the 'Scan Report' tab.

    5. Enter your email address and click 'Send Report' If you are unable to send a report that way click 'Copy Report' and paste it on our help desk at the following link:
    http://www.spyzooka.com/cgi-bin/ttx.cgi

    Regards,
    Carl Haugen
    President
    BluePenguin Software
  • TroganTrogan London, UK
    edited January 2008
    JSTER, will you be posting a new HijackThis log?
  • JSTER
    edited January 2008
    Trogan wrote:
    JSTER, will you be posting a new HijackThis log?
    Yes here it is!

    Logfile of HijackThis v1.99.1
    Scan saved at 6:07:40 PM, on 1/7/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\Program Files\Spyware Doctor\svcntaux.exe
    C:\Program Files\Spyware Doctor\swdsvc.exe
    C:\Program Files\Spyware Doctor\SDTrayApp.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
    C:\WINDOWS\System32\alg.exe
    C:\PROGRA~1\TRENDM~1\INTERN~1\PccGuide.exe
    C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
    C:\Program Files\Common Files\aol\1197415644\ee\aolsoftware.exe
    C:\Program Files\AOL 9.1\waol.exe
    C:\Program Files\AOL 9.1\shellmon.exe
    C:\Program Files\SpyZooka\spyzooka.exe
    C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
    C:\DOCUME~1\JIMMAG~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1197347641015
    O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
    O20 - Winlogon Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: dlcf_device - - C:\WINDOWS\system32\dlcfcoms.exe
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: GoToAssist - Unknown owner - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe" Start=service (file missing)
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
    O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
    O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
    O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
    O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
  • saburns
    edited January 2008
    After receiving this response from Spyzooka technical support I will be removing their product from all of my PCs.

    "We assure you that the alarm did not impacted other products at all. We are constantly update our database according to the latest threats. That's why it's essential to always have the latest signature database.

    Glad to hear that the problems are gone. Let us know if you have any problems or questions regarding SpyZooka. "

    I work in the industry and have enough years of experience to know that when I run application A and application B, C, and D suddenly work differently, or not at all,that it is probably application A that caused the problem. Granted, it was not the alarm that caused the problem but the removal/cleanup routine definitly did impact other programs in my opinion.

    It is unfortunate, since I have been happy with the Spyzooka product in the past, but due to the response I have had on this issue I will no longer use their product.
  • TroganTrogan London, UK
    edited January 2008
    Hi JSTER, your HijackThis log is clean.

    Saburns, sorry to hear about your problems. I hope you know there are very good anti-malware programs available that are free too. Not to dismiss Spyzooka, but that is fact.
  • JSTER
    edited January 2008
    Thanks for responding, I understand. I am ok now, but not sure yet what is going to be next. JSTER
    saburns wrote:
    After receiving this response from Spyzooka technical support I will be removing their product from all of my PCs.

    "We assure you that the alarm did not impacted other products at all. We are constantly update our database according to the latest threats. That's why it's essential to always have the latest signature database.

    Glad to hear that the problems are gone. Let us know if you have any problems or questions regarding SpyZooka. "

    I work in the industry and have enough years of experience to know that when I run application A and application B, C, and D suddenly work differently, or not at all,that it is probably application A that caused the problem. Granted, it was not the alarm that caused the problem but the removal/cleanup routine definitly did impact other programs in my opinion.

    It is unfortunate, since I have been happy with the Spyzooka product in the past, but due to the response I have had on this issue I will no longer use their product.
This discussion has been closed.