seaniesharko

Hi, I'm having a lot of trouble with getting rid of spyware etc.

I ran xsoftspy and it located these files:

Viewpoint Registry Key Potentially Unwanted interface\{9dbb28cd-1925-11d3-a498-00104b6eb52e}
Viewpoint Registry Key Potentially Unwanted interface\{9dbb28cd-1925-11d3-a498-00104b6eb52e}\proxystubclsid
Viewpoint Registry Key Potentially Unwanted interface\{9dbb28cd-1925-11d3-a498-00104b6eb52e}\proxystubclsid32
Viewpoint Registry Key Potentially Unwanted interface\{9dbb28cd-1925-11d3-a498-00104b6eb52e}\typelib

I clicked remove and it said the files had been removed, but later when I run it again, the same files are shown unremoved.

Similar results are had when I run spybot search and destroy.
I attached the spybot report to this post.
After I remove those files through spybot it says 31 problems fixed, but the same files are still there when i run spybot again. How can I permanently remove these files from my computer?

Help would be most appreciated. Thank you.

Attached Files

SpybotSD.Results.txt (181.8 KB, 8 views)

Adam_30457

What other programs do you have for spyware? If you can download AVG Antispyware and see if it finds these.

seaniesharko

Yes, I do have AVG. When I scan with AVG the same files show up, but when I remove the files or quarantine they still come up on next scan.

Go The Power

What are the files?

Adam_30457

I do know that some registry keys that windows makes can be recreated even after you clean them. Some apyware programs will pick them up and clean them out but then windows will recreate them. I saw this on an article, I'll see if I can find it again.

Glaswegian

Viewpoint can be sneaky - see here for some help with full removal.

http://edeldoug.blogs.com/thoughts_r...orced_ins.html

Do you have SD Tea Timer running? You'll need to disable it completely otherwise it will simply undo any changes you make.

seaniesharko

The files are:
AdRevolver
CasaleMedia
Statcounter
BlackCore
Zedo

And, I don't think I have the tea timer running, but how do I make sure it's disabled? Does it start up every time I use spybot?

Glaswegian

See here to disable TT

http://forums.spybot.info/showthread.php?t=44

seaniesharko

well, it didn't work. I ran spybot twice and each time it said the files were removed, but then they showed up again. Is there nothing more I can do?

Ried

These are tracking cookies that will be placed on your system time and time again, depending on the sites you visit.

The following program will help thwart many of those:

IE-SPYAD.EXE to block access to malicious websites so you cannot be redirected to them from an infected site or email. IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. This is a self-extracting .ZIP file, save it to your desktop. Once downloaded, double-click on it to extract the files inside (default dir is C:\IE-SPYAD)

• Now navigate to C:\ie-spyad. Double click to open it.
• From within the folder, double-click install.bat
• Select Option #2 - Install the new IE-SPYAD list, by typing 2
• Then return to the main menu.
• Select option #4 - Add the old porn sites domain, by typing 4