Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » Spyware / AdWare » [Answered] Adware??

Spyware / AdWare - Adware?? posted in the Security & Safety forums; I got a new (to me) adware bug the other day after a scan. It's location is listed as: C:\WINDOWS\sed.exe . Then I performed a search and found it. FWiW, ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 07-11-2008
Cobracon's Avatar
Elite Member
My PC
 
Join Date: Jan 2008
Location: RoosterPoot, MS (North of Hurricane Alley); US of A
Posts: 459
PC Experience: DOH!! *&^%$#@!
Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page
Default Adware??

I got a new (to me) adware bug the other day after a scan. It's location is listed as: C:\WINDOWS\sed.exe . Then I performed a search and found it. FWiW, the date is 07-07-08, and a check of my System Restore dates show no new programs added or anything special on that date.

For protection I use Spywareblaster, Kaspersky, and occasionally run Malwarebytes on all 3 computers. They don't even notice it. The only program that catches it is the Spyware Detective option of Advanced System Optimizer. This bug was found on 2 of 3 computers. If I use ASO to remove it, after a reboot it's right back.

As an experiment, I created a Restore Point (in case I messed up) then manually deleted the entry. After rebooting it didn't reappear. Any insight on this??


__________________
"Have you scanned the RAM timings for Operator's Headspace?? Too much real estate between the audio collectors will block the connection which allows proper operation of your computer." __B. Lowe

An Optimist sees opportunity in every difficulty.

A Pessimist sees difficulty in every opportunity.

Which page are YOU on??
  #2  
Old 07-11-2008
Jelly Bean's Avatar
Moderation Team Leader
My PC
 
Join Date: Feb 2008
Location: Swansea
Posts: 5,916
PC Experience: I Try My Best.
Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page
Send a message via MSN to Jelly Bean Send a message via Yahoo to Jelly Bean Send a message via Skype™ to Jelly Bean
Default Re: Adware??

Hi you may want to run the Prework?


__________________
It is all in the hardware..........................................
Sources:
Microsoft Home Page /Seagate Home Page /Petri Home Page

PCHF Rules / Home Page / Prework /Windows Vista Home Page / XBOX360 / Test your Internet Speed
  #3  
Old 07-11-2008
Cobracon's Avatar
Elite Member
My PC
 
Join Date: Jan 2008
Location: RoosterPoot, MS (North of Hurricane Alley); US of A
Posts: 459
PC Experience: DOH!! *&^%$#@!
Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page
Default Re: Adware??

Well ya' know Ms. JB the thought crossed my mind, and I did that very thing after deleting the 'sed.exe' entry. I compared the results (line for line) to a scan done after Pancake helped me a few weeks ago when I had the Vundo, or whatever it was, infection after loaning that computer to my brother. The two scans were identical.

I assumed since the post 'Pancake Fix' scan and the post 'sed.exe removal' scan were the same, things are OK. Of course I used the S.W.A.G. method to arrive at my conclusion, so it's probably WRONG.

A Google search turned up some interesting information on sed.exe & related spyware. I think Look2Me was one of the main sources.

Thanks for the input. I may just tread water for a while and see what happens.



__________________
"Have you scanned the RAM timings for Operator's Headspace?? Too much real estate between the audio collectors will block the connection which allows proper operation of your computer." __B. Lowe

An Optimist sees opportunity in every difficulty.

A Pessimist sees difficulty in every opportunity.

Which page are YOU on??
  #4  
Old 07-11-2008
Jelly Bean's Avatar
Moderation Team Leader
My PC
 
Join Date: Feb 2008
Location: Swansea
Posts: 5,916
PC Experience: I Try My Best.
Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page
Send a message via MSN to Jelly Bean Send a message via Yahoo to Jelly Bean Send a message via Skype™ to Jelly Bean
Default Re: Adware??

Check out bleeping computers website on this one.


__________________
It is all in the hardware..........................................
Sources:
Microsoft Home Page /Seagate Home Page /Petri Home Page

PCHF Rules / Home Page / Prework /Windows Vista Home Page / XBOX360 / Test your Internet Speed
  #5  
Old 07-11-2008
Cobracon's Avatar
Elite Member
My PC
 
Join Date: Jan 2008
Location: RoosterPoot, MS (North of Hurricane Alley); US of A
Posts: 459
PC Experience: DOH!! *&^%$#@!
Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page
Default Re: Adware??

Oakie Doakie....................


__________________
"Have you scanned the RAM timings for Operator's Headspace?? Too much real estate between the audio collectors will block the connection which allows proper operation of your computer." __B. Lowe

An Optimist sees opportunity in every difficulty.

A Pessimist sees difficulty in every opportunity.

Which page are YOU on??
  #6  
Old 07-11-2008
Cobracon's Avatar
Elite Member
My PC
 
Join Date: Jan 2008
Location: RoosterPoot, MS (North of Hurricane Alley); US of A
Posts: 459
PC Experience: DOH!! *&^%$#@!
Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page Cobracon - See this Members User comments on their Profile page
Default Re: Adware??

JB,

There are some pretty detailed instructions for removing Look2Me here in case you're interested:

PC Hell: How to Remove Look2Me


__________________
"Have you scanned the RAM timings for Operator's Headspace?? Too much real estate between the audio collectors will block the connection which allows proper operation of your computer." __B. Lowe

An Optimist sees opportunity in every difficulty.

A Pessimist sees difficulty in every opportunity.

Which page are YOU on??
  #7  
Old 07-11-2008
Jelly Bean's Avatar
Moderation Team Leader
My PC
 
Join Date: Feb 2008
Location: Swansea
Posts: 5,916
PC Experience: I Try My Best.
Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page Jelly Bean - See this Members User comments on their Profile page
Send a message via MSN to Jelly Bean Send a message via Yahoo to Jelly Bean Send a message via Skype™ to Jelly Bean
Default Re: Adware??

I would regedit myself.But shall leave this type of thing to Security Team.

Thankyou for link.



I was away from chat sorry I missed you I was sorting out the new power meter.Sorry.


__________________
It is all in the hardware..........................................
Sources:
Microsoft Home Page /Seagate Home Page /Petri Home Page

PCHF Rules / Home Page / Prework /Windows Vista Home Page / XBOX360 / Test your Internet Speed

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Tags
adware

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 03:26 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top