PDA

View Full Version : Annoying spyware!!! plz help

Sankalp
24-01-2005, 01:45 PM
I ran Spybot but the follwing result comes everytime I restart my computer. What should i do to remove them

Error during check!: InterFun (Datei E:\WINDOWS\system.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) ()

Error during check!: Cabrotor (Datei E:\WINDOWS\win.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) ()


DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-21-436374069-2025429265-725345543-500\Software\Microsoft\Windows\CurrentVersion\Inte rnet Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings\Zones\0\1004!=W=3


--- Spybot - Search && Destroy version: 1.3 ---
2004-11-29 Includes\Cookies.sbi
2005-01-04 Includes\Dialer.sbi
2005-01-04 Includes\Hijackers.sbi
2004-12-29 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2005-01-04 Includes\Malware.sbi
2004-08-11 Includes\plugin-ignore.ini
2004-11-29 Includes\Revision.sbi
2004-11-29 Includes\Security.sbi
2005-01-05 Includes\Spybots.sbi
2004-11-29 Includes\Tracks.uti
2005-01-04 Includes\Trojans.sbi
Yoda
24-01-2005, 03:34 PM
hi,

Use "Ad-Aware SE Professional 1.05" with the latest Definitions.
For Latest Definitions visit "h**p://www.lavasoft.com"

and also "Webroots Spy Sweeper v3.5.0 Build 189" with the Latest Definitions.

Try Both of them.

These two are one of the best softwares in the world.

Use these two softwares your problem may get solved.
thegame_rulez
24-01-2005, 03:42 PM
try running the scan in safe mode.
h4ck3r
24-01-2005, 05:18 PM
Hey take a look at the right top of the forums before posting a thread

You can read batty's guide to spyware and then post ..
I mean u can serch before posting
theraven
24-01-2005, 09:50 PM
Please post ur hijack this logfile for further assessment of the problem

also use spybot/adaware in collaboration with microsoft antispyware ..
this is the best combo ;)
indrajit
25-01-2005, 01:06 AM
To remove the DSO Esploits you have to download and install a patch for SpyBot (you do have SpyBot, right?). You can get it here (http://www.majorgeeks.com/download4392.html).

Error during check!: InterFun (Datei E:\WINDOWS\system.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) ()
Its a dialer. Get the removal instructions here (http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453074895)

Error during check!: Cabrotor (Datei E:\WINDOWS\win.ini kann nicht geöffnet werden. The process cannot access the file because it is being used by another process) ()

Cabrotor, its a trozan. Check
this link (http://www.spywareguide.com/product_show.php?id=1032).
Get the removal software here (http://www.2-spyware.com/remove-cabrotor-trojan.html).