Member Panel


Sponsors and Ads

Join the Team

Live Tag Cloud

[Fixed] Hijackthis! Logs - [Fixed] SpySheriff posted in the Security & Safety forums; Ok this program just appeared on my computer.? It claims to be a spyware cleaners and such... I uninsalled it and when i restart my comp it just comes back. ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 07-01-2005
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default [Fixed] SpySheriff

Ok this program just appeared on my computer.? It claims to be a spyware cleaners and such... I uninsalled it and when i restart my comp it just comes back. It changed my desktop backround to "CRITICAL WARnING!.....(blah blah blah)."? I have done adaware scans, mcafee scanns, spyot s&d scans and nothing.? Adaware detects it as a spyware but when i click to delete it it fails every time...And the proggy comes back just the same.? I tried deletin the folder in c:/programs files and i deleting it from the control panel add/remove program wizard.? Any ideas on how to get rid of this pesky program (and and big surprise it wants me to subscibe and pay money...)? Btw it wont let my change my desltop backround either....

thanx

-Daem


__________________
  #2  
Old 07-01-2005
Hengis's Avatar
PCHF Founder & Owner
My PC
 
Join Date: Jan 2004
Location: Berkshire, England
Posts: 11,114
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default Re: SpySheriff

Time for a HijackThis log methinks...

http://www.pchelpforum.com/component...0/topic,500.0/


__________________
> Pre-Work > System File Checker
> Did we help you? If we did, please consider A Donation
  #3  
Old 07-01-2005
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default Re: SpySheriff

lol i had one ready when i did the first post...just forgot to add it . here ya go


-Daem
Attached Files
File Type: txt log.txt (5.9 KB, 2 views)


__________________

Last edited by Hengis; 11-20-2005 at 11:35 PM.
  #4  
Old 07-01-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default Re: SpySheriff

You can fix these with Hijackthis:

O4 - HKLM\..\Run: [kbVh77186] C:\WINDOWS\ovljiv.exe
O4 - HKLM\..\Run: [hkpyhwh] C:\WINDOWS\hkpyhwh.exe
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
And these are unnecessary:

C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe

And after that can you post a new log with this version:

Hijackthis


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 07-05-2005
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default Re: SpySheriff

mm k... did that, gonna post it and restart comp.* I noticed that my mcaffe virus scan keep dtectin a trojan inside of a Java folder...and when i left my comp on for a while, it had about 20 Java icons in the bottom right corner by the clock....




ok i restarted my comp, and it appears that spysheriff is gone , however , my bockround is still that "CRITICAL WARNING' Bull Sh*t and when i try to change it in the properties screen i cannot click on the other backrounds, and when i right click on a pic and do "ste as desktop background" nothin happens... any ideas?

...btw i took that HiJackThis after the restart.
thanx
-Daem
Attached Files
File Type: txt log.txt (5.6 KB, 0 views)


__________________

Last edited by Hengis; 11-20-2005 at 11:37 PM.
  #6  
Old 07-05-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,044
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default Re: SpySheriff

Youre log looks pretty clean and good to hear spysherrif is gone , try running an online AV scan to see if it catches anything:

Online Scans

There are 2 entry's left in youre log that i can't find anything about , one is a toolbar and one says its something with directx.
If you don't regognize the toolbar then you can remove it and the directx entry can also be removed but just in case make sure you have directx 9.0c ready to install again.

O3 - Toolbar: online up - {6095B8C0-48CE-2CFB-B3FE-E874E29302DD} - C:\PROGRA~1\MANAGE~1\kind mess.dll
O4 - HKCU\..\Run: [DirectX shell driver] C:\WINDOWS\sammp32.exe


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #7  
Old 07-05-2005
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default Re: SpySheriff

alright, the only matter that remains is that annoying backround... here is a screenie.? I noticed i can highlight the text.? This seems to me that it may be a web page or something like that.? When windows shuts down my actual backround does show for just a second... so its almost like this must be just covering my normal backround...

Note: there are no shortcuts because i hide them for a screen shot thing, and now i cant get them back... when i right click on the desktop nothing happens.
-Daem
Attached Images
File Type: png backround.png (37.7 KB, 48 views)
Attached Files
File Type: png_thumb backround.png_thumb (4.3 KB, 1 views)


__________________

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 05:57 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top
Credit Cards UK
Advice from the credit card experts at moneyexpert.com

Credit Cards
Credit card comparison from the experts.

Advertising
Join the free co-op advertising network and increase your traffic.