[Chris369]

Well i have now installed Panda Platinum internet security (demo) instead of AVG and i started a scan and it found a few spyware things. One was in C:\Program Files\Common Files\'Something' Shared

I cant remember what the something was and i cant find the directory either

So im gonna do a complete scan with it and see what else it finds.

Also, the ABI Network is still listed under Add/Remove Programs and there is another thing that has been there forever called 'CasProg' which wont let me uninstall either.

Apart from that, everything is great at the moment.

[Advertisements]

Chris,


Here is the way you get rid of those programs in the uninstall list:

Delete an Entry from the Uninstall List

• Open HiJackThis
• Click on the "Config..." button on the bottom right
• Click on the tab "Misc Tools"
• Click on the Box that says "Uninstall Manager"
• Click on the entry you wish to delete
• Click on Delete this entry
• Click "Yes"

Let me know how that log turns out.


Thanks,



Excal

[Excal]

Chris,


Here is the way you get rid of those programs in the uninstall list:

Delete an Entry from the Uninstall List

• Open HiJackThis
• Click on the "Config..." button on the bottom right
• Click on the tab "Misc Tools"
• Click on the Box that says "Uninstall Manager"
• Click on the entry you wish to delete
• Click on Delete this entry
• Click "Yes"

Let me know how that log turns out.


Thanks,



Excal

[Chris369]

Both of the entries in the Add/Remove programs list have now been removed. The Panda scan found 100 cookies and another spyware thing but that was in MS antispyware quarantine folder. Everything seems to be fine now.

Thanks for all your help

[Excal]

Great job, it appears your computer is clean

Ensure you rehide your “hidden files and folders” back to the way they were.

Now that your system is Malware Free, it is important to reset your system Restore. Click Here to learn how to.

Might I suggest the following Free Spyware programs, if you don't already have them, for added security, you can download them at the following links. These programs work great for detection:

Ad-aware SE
Spybot S&D
Microsoft Anti-Spyware


If you are unhappy with your current antivirus and want to replace it or if you dont already have one, I suggest one of these free programs:
*Note - do not use more than one anti-virus program as it will more than likely cause conflict.

AVG
Avast
AntiVir


The following free programs are great for prevention:

SpywareBlaster 3.4
Spywareguard
IE/Spyad

A Firewall is a must! Here are 3 good free versions:
(do not have more than one firewall running on your system)

Sygate
Kerio
ZoneLabs

There are other options other than Internet Explorer for a browser, which some say have better security. Two of them are:

Firefox
Opera

If you decide to keep Internet Explorer, This site is a great source for tightening up security on It's settings.

Make sure that you keep your Operating System and IE updated with the latest Critical Security Updates from Microsoft...they usually come out once a month, on the 2nd Tuesday of each month.

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.
For ease use the following program:

Cleanup
Run "Cleanup" and when it has finished, Reboot

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided. Also read How I got Infected

[Chris369]

Im using Panda Platinum which have AV, firewall and what seems to be a good spyware detector. Ive always used Firefox aswell

I have no idea how it got through because im pretty careful with things Im gonna read 'How i got infected' and see if i can work it out

[Excal]

You really should run spyboy S&D and AdAware at least once a week. Both are excellent detectors and free


Excal

[Chris369]

Im afraid im no longer clean

Everytime i shutdown my computer it says something about not shutting down because Iface.exe cannot be ended. I just looked it up on google and its a virus

[Excal]

Do me a favor and find the path to it (ie C:\windows?)


Then let me know.

Thanks,



Excal

[Chris369]

C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security

hehe. Just before i posted that I did a quick search for iface on google and it came up as a trojan. Ive just ran a search on my computer and thats the directory. My bad

Sorry for the false alarm

[Excal]

If you want to make sure, you can upload it to Jotti's, or is it in the qurunteen section?



Excal

[Chris369]

Its not in quarantine. I think it is a neccesary part of Panda Platinum. Its even got the Panda icon

What is Jotti's ?

Edited by Chris369, 03 August 2005 - 02:58 PM.

[Excal]

• Please go to Jotti's malware scan
  
• Copy and paste the following file path into the "File to upload & scan"box on the top of the page:
  • PUT the file path in here
• Click on the submit button
  
• Please post the results in your next reply.

Edited by Excal, 03 August 2005 - 03:04 PM.

[Chris369]

Here is it

AntiVir 	 Found nothing
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
Fortinet  Found W32/Startpage.DU-dr
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
UNA  Found nothing
VBA32  Found nothing

Only one out of all those scans though it was infected. And there was a note saying this

(Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)

So i guess its probaly false.

[Excal]

I would say your good to go



Excal

[Chris369]

Thanks for your help

Ive got another computer (not actually mine, family comp) that has 60 odd proccesses running on it. Im gonna see if i can spot anything myself before i post on here - will be good practice for me

Edited by Chris369, 04 August 2005 - 09:26 AM.