alt.privacy.spyware Google Group

Re: Infection messages

dlipman~nosp...@verizon.net (David H. Lipman) — Tue, 24 Nov 2009 22:55:11 UT

As I noted in the orginal thread that was susequently x-posted to m.p.s.v. ...
From the description, it is happening PRIOR to the Winlogon Process during OS
initialization.
The question the becomes what is generating it ?
The message "Infection: docs and settings my name cookies/index.dat..."
Could be indicative of a legitimate program (antimalware) that is installed

Re: SpyDLLRemover

s...@uce.gov (siljaline) — Tue, 24 Nov 2009 20:30:06 UT

Personally, I have never encountered this app, Max - that isn't to say that it isn't perfectly
viable - your option to use it or not.
Cheers,
Silj

Re: Infection messages

e...@nada.com.invalid (Buffalo) — Tue, 24 Nov 2009 17:36:45 UT

It sounds like a leftover and I would think one of the folks here will be
along shortly to give you some good advice on what to do to resolve your
problem.
Buffalo

Infection messages

docro...@ntlworld.com (Robin Bignall) — Tue, 24 Nov 2009 16:07:31 UT

Recently I've been getting screens full of the same message, white
writing on blue background, just after the first boot screen of
Windows (the one with the blue bar going left to right) and before the
logon screen.
INFECTION: DOCUMENTS AND SETTINGS\ROBIN BIGNALL\COOKIES\INDEX.DAT
COULD NOT BE REMOVED. FILE IS NO LONGER EXISTENT.

SpyDLLRemover

maxpr...@hotmail.com (Maximus the Mad) — Mon, 23 Nov 2009 03:09:18 UT

Does anyone have experience using SpyDLLRemover? Here is a link to the
PortableApps version.
[link]

Re: Spyware Blaster Updated 11/21/09

s...@uce.gov (siljaline) — Sun, 22 Nov 2009 18:35:41 UT

You are welcome, Kudos on Javacool and his team updating more often of late.
Silj

Re: Spyware Blaster Updated 11/21/09

e...@nada.com.invalid (Buffalo) — Sun, 22 Nov 2009 17:11:35 UT

Got it this am.
Thanks,
Buffalo

Re: Avira switches to new update system

bughunter.dus...@gmail.com (Dustin Cook) — Sun, 22 Nov 2009 04:54:18 UT

"Maximus the Mad" <maxpr...@hotmail.com> wrote in
news:op.u3rmv0o4v8h8pn@maximusthemad:
I hadn't considered that. :) Perhaps if that's not the cause, too close
to explosives during detonation might be?

Spyware Blaster Updated 11/21/09

s...@uce.gov (siljaline) — Sun, 22 Nov 2009 03:22:22 UT

13012 Total Items in database, 42 items for IE.
<[link]>
Silj

Re: Avira really sucks for getting updates!

e...@nada.com.invalid (Buffalo) — Sun, 22 Nov 2009 00:44:35 UT

The free Avira I use has been absolutely terrible getting updates at times.
Sometimes it takes well over on-half hour and still no update.
Since they changed it last week, the updates are quick.
Buffalo

Re: Avira switches to new update system

maxpr...@hotmail.com (Maximus the Mad) — Sat, 21 Nov 2009 22:17:50 UT

On Sat, 21 Nov 2009 16:18:33 -0500, Dustin Cook
I think that he was hit one too many times by that anvil while chasing
the elusive roadrunner.

Re: Avira really sucks for getting updates!

dlipman~nosp...@verizon.net (David H. Lipman) — Sat, 21 Nov 2009 21:49:44 UT

Re: Avira switches to new update system

bughunter.dus...@gmail.com (Dustin Cook) — Sat, 21 Nov 2009 21:18:33 UT

"Wile E. Coyote" <coy...@ACME.invalid> wrote in news:ghBNm.53036$gg6.46072
@newsfe25.iad:
Yay! Go you.. Would you like a cookie?

Re: Avira switches to new update system

coy...@acme.invalid (Wile E. Coyote) — Sat, 21 Nov 2009 20:54:25 UT

Whatever you say Fred. ;)
"As I have inserted update jobs (minimized) to update every two hours.
I hardly ever notice that an update is "slow".
Updates today:
- 00:06 minutes
- 00:32 minutes
- 02:06 minutes
- 00:01 minutes
When you say that updates for Avira have never been normal for you,
why don't you switch to Avast?"

Re: Avira really sucks for getting updates!

coy...@acme.invalid (Wile E. Coyote) — Sat, 21 Nov 2009 20:50:59 UT

I agree it is end of story because I updated Avira on both XP and Win7
and it now gets updates in a timely manner. But that is only thanks to
people like me who bitched about it and I was just replying to keep my
detractors in check.

Re: Avira switches to new update system

s...@dow (Shadow) — Sat, 21 Nov 2009 10:17:01 UT

On Thu, 19 Nov 2009 17:42:04 +0100, FredW <fr...@blackholespam.net>
wrote:
I have had no more problems at all with Avira updates. So the
new method is working fine. Update check takes at most one minute vs
missing whole days with old update.
From Brazil.
[]'s

The FAQ for [updated June 21, 2009]

shpl...@removeme.shplink.com (shplink) — Sat, 21 Nov 2009 06:20:58 UT

1. What is alt.privacy.spyware?
2. Who can post here?
3. What is spyware?
4. Can you give me some more details on the types of spyware that exist?
5. How is spyware different from, or similar to, adware?
6. Why/How is spyware a problem?
7. Are there any posting restrictions, rules or guidelines?
8. How reliable is the information I might get?

Re: Avira really sucks for getting updates!

dlipman~nosp...@verizon.net (David H. Lipman) — Fri, 20 Nov 2009 23:28:12 UT

All that counts here...
You posted that there WERE problems getting updates.
Some said they had no problems, I noted an agreement with you.
Avira recognized that there was indeed a problem and is doing something to rectify the
problem.
End of Story :-)

Re: Avira switches to new update system

fr...@blackholespam.net (FredW) — Fri, 20 Nov 2009 22:11:12 UT

On Fri, 20 Nov 2009 10:33:10 -0800, "Wiley Coyote"
I never claimed anything.
It must be your imagination, as I said before.
But I understand you do not allow anybody to "argue with you".
Goodbye now, I do not want to waste your time anymore.
(I wonder why you would want to waste *my* time?)

Re: Avira switches to new update system

coy...@acme.invalid (Wile E. Coyote) — Fri, 20 Nov 2009 18:33:10 UT

Yes and yes. Last update was nice and fast but that doesn't negate the
fact you tried to argue with me and claim there was no such issue. Now
Avira has come out and addressed the issue so are admitting there was an
issue with getting updates so that makes me right and you wrong.

Re: Avira really sucks for getting updates!

coy...@acme.invalid (Wile E. Coyote) — Fri, 20 Nov 2009 18:29:34 UT

Rick wrote:
I'm not confusing anything. GamersGate is a download service owned by
Paradox Games to buy games and not a MP game.
[link]

Re: Avira switches to new update system

fr...@blackholespam.net (FredW) — Fri, 20 Nov 2009 13:37:29 UT

On Thu, 19 Nov 2009 22:34:50 -0800, "Wile E. Coyote"
[link]
<selective quoting repaired>
Only in your mind.
Complaining, complaining, complaining, ............
Did you read anything in the links?
Did you try the changed update?

Re: Avira really sucks for getting updates!

rsi...@cris.com (Rick) — Fri, 20 Nov 2009 13:17:46 UT

"Wile E. Coyote" <coy...@ACME.invalid> wrote in
You seem to be confusing latency with bandwidth and/or concurrent
connection limitations. Latency will affect on-line multiplayer games but
will have negligible affects on downloading speeds. Bandwidth and
concurrent connection limitations on the other hand, can seriously impact

Re: Avira really sucks for getting updates!

coy...@acme.invalid (Wile E. Coyote) — Fri, 20 Nov 2009 06:40:22 UT

Because if he is such an expert then he should know that if the server
is in Europe then there is a good chance you will get slower downloads
in N.A. due to longer route and more hops. That's common knowledge
and,I, and other people have complained to GamersGate game download
service for the exact same reason and they are putting up a NA server in

Re: Avira switches to new update system

coy...@acme.invalid (Wile E. Coyote) — Fri, 20 Nov 2009 06:34:50 UT

Thought you claimed there were no issues, Fred? According to what I read
at the Avira website it was just more than people who used the free
version too. One guy said he dumped his paid for version and tried the
free version to see if it improved the situation for him but it didn't.

Re: Avira really sucks for getting updates!

bughunter.dus...@gmail.com (Dustin Cook) — Fri, 20 Nov 2009 00:57:43 UT

"Wile E. Coyote" <coy...@ACME.invalid> wrote in news:v7KLm.12816$ky1.9874
@newsfe14.iad:
I don't suppose i'll ever understand why unknown individuals (at best) seem
to be quick with smartass remarks towards people who are well known and
respected in the field of malware....

Re: Search hijacker

bughunter.dus...@gmail.com (Dustin Cook) — Fri, 20 Nov 2009 00:52:21 UT

"Lil' Abner" <blv...@dogpatch.com> wrote in
news:Xns9CC8650F4632Fbutter@wefb973cbe498:
Hi there. You might try our forums for assistance. If you have something
new, we can deal with it. :)
[link]

Re: Search hijacker

erra...@nomail.afraid.org (FromTheRafters) — Fri, 20 Nov 2009 00:39:17 UT

Have you checked for a rootkit?
Also, combofix sometimes works.
news:Xns9CC8AB37F6A91butter@wefb973cbe498...

Re: Search hijacker

e...@nada.com.invalid (Buffalo) — Fri, 20 Nov 2009 00:19:46 UT

[snip]
Thanks for the reply.
Buiffalo

Re: Search hijacker

j...@example.invalid (JD) — Fri, 20 Nov 2009 00:09:51 UT

Did you try a-squared Free:
[link]
or HiJackFree:
[link]

Re: Search hijacker

blv...@dogpatch.com (Lil' Abner) — Thu, 19 Nov 2009 22:49:54 UT

"Buffalo" <E...@nada.com.invalid> wrote in
I installed mbam and updated it just before I ran it, so probably so.
I didn't really look at the version number.
A note of interest. I haven't used Adaware forever but I decided to
download it and try it. It didn't find much of anything but it did find a

Re: Avira switches to new update system

s...@uce.gov (siljaline) — Thu, 19 Nov 2009 20:15:52 UT

I had omitted to re-subscribe to that GRC Group after last re-install.
Noted and posted in:
<[link]>
Silj

Re: Avira switches to new update system

fr...@blackholespam.net (FredW) — Thu, 19 Nov 2009 20:03:52 UT

Very nice, thank you.
I passed this message after finding it in grc.security.software.
See also:
[link]
(almost the same message)
;-)

Re: Avira switches to new update system

s...@uce.gov (siljaline) — Thu, 19 Nov 2009 19:46:35 UT

Greets, Fred - I shall pass this along so others may benefit from this information.
Silj

Re: Search hijacker

e...@nada.com.invalid (Buffalo) — Thu, 19 Nov 2009 18:35:47 UT

Just curious if you had the latest def update and the latest version (1.41)
of MBAM?
Buffalo

Avira switches to new update system

fr...@blackholespam.net (FredW) — Thu, 19 Nov 2009 16:42:04 UT

[link]
Due to the fast growing amount of malware out there in the wild our
virus definition files grow fast as well. We monitored the situation
with our Updates very closely. We realise that users of the free Avira
AntiVir Personal had issues fetching the Updates in time recently and

Re: Search hijacker

s...@uce.gov (siljaline) — Thu, 19 Nov 2009 16:05:27 UT

Noted, best bet is to post an HJT Log to your Forum of choice that supports HJT Logs.
As you already know you need to go this route or format and reinstall *but* since this is
a new known Rogue there is a possibility of recovery from the situation.
Good luck !
Silj

Re: Search hijacker

blv...@dogpatch.com (Lil' Abner) — Thu, 19 Nov 2009 15:56:05 UT

"siljaline" <s...@uce.gov> wrote in news:he3nrb$5qs$1@news.eternal-
september.org:
Instructions for running Malwarebytes.
As mentioned above, that was the first thing I ran.

Re: Search hijacker

s...@uce.gov (siljaline) — Thu, 19 Nov 2009 15:22:38 UT

This is a new Rogue, removal guide here :
<[link]>
Silj

Search hijacker

blv...@dogpatch.com (Lil' Abner) — Thu, 19 Nov 2009 14:59:27 UT

I just got done cleaning up a computer that had one of the rogue
antimalware apps. This one was named "Control Center". After finally
figuring out a way to get around it in Safe Mode (it came up there too) I
was able to get rid of it with Malwarebytes. I went back in Normal mode and
ran it again. Also ran Superantispyware and am getting a clean bill of

Re: MSUVR0.DLL - anyone seen this?

dlipman~nosp...@verizon.net (David H. Lipman) — Thu, 19 Nov 2009 00:27:39 UT

If/when you get it, upload it to Virus Total and post the results as well as upload it to [link]

Re: IOBit Steals Malwarebytes Intellectual Property

dlipman~nosp...@verizon.net (David H. Lipman) — Thu, 19 Nov 2009 00:26:22 UT

Actually there is more to the story.
There is no doubt of the actual nature of IObit.
They are...
Associated with Chinese porn industy
May have stolen IP from other antimalware and security related software companies
Are faking alliance and affilaite connections with other well known, legitimate companies.

Re: IOBit Steals Malwarebytes Intellectual Property

t...@void.com (The Real Truth MVP) — Thu, 19 Nov 2009 00:09:06 UT

Yes it does stand up I have proof that it is stolen.

Re: IOBit Steals Malwarebytes Intellectual Property

(Stephen Howe) — Wed, 18 Nov 2009 23:05:12 UT

But does MalwareBytes claims stand up?
I am not doubting their veracity but it maybe that some other explanation accounts for what they observed.
I read
[link]
and
[link]
and it does not seem conclusive.

MSUVR0.DLL - anyone seen this?

(Stephen Howe) — Wed, 18 Nov 2009 22:39:40 UT

Hi
Has anyone seen or know what MSUVR0.DLL does?
It looks like a Microsoft DLL but it might not be, it might be rogue.
It appears to be Browser Help Object of IE
If you Google for it, I find one reference across the web (In a HiJack log) and no explanation.
One of my colleagues has it on his PC and it is not on mine.

Re: Avira really sucks for getting updates!

coy...@acme.invalid (Wile E. Coyote) — Tue, 17 Nov 2009 20:38:45 UT

I`m demanding on behalf of the people that do pay. And just so you know,
there have been a couple of occasions where I have been close to
clicking the buy button but didn`t because of the slow server update issue.

Re: Avira really sucks for getting updates!

coy...@acme.invalid (Wile E. Coyote) — Tue, 17 Nov 2009 20:36:31 UT

Yes, that would explain why I still use Avira on 2 PCs even though I
know Avast, AVG and MSSE are much faster at getting updates.

Trojans likely to follow Win 7 activation hack

s...@uce.gov (siljaline) — Tue, 17 Nov 2009 15:59:15 UT

[...]
Trojan attacks are likely in the wake of the Windows 7 product activation system cracks developed last week, less than a month after the release of Microsoft's latest operating system.
The RemoveWAT (and the similar ChewWGA) utility allow a prospective Windows 7 user to bypass the Windows Genuine Advantage registration procedure.

Two New Rogue Apps / Removal Guides

s...@uce.gov (siljaline) — Tue, 17 Nov 2009 04:17:38 UT

<[link]>
Description of Rogue at URL.
<[link]>
Ditto as above.
Silj

Re: Avira really sucks for getting updates!

dlipman~nosp...@verizon.net (David H. Lipman) — Tue, 17 Nov 2009 00:06:35 UT

This issue is NOT overall endemic problem. From my use and experience it is sporadic at
best.