Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 



Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > General Computer Security
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


General Computer Security Get Help With System Security - This forum is not for malware removal assistance. For malware removal assistance, read the sticky topic at the top of the Virus/Trojan/Spyware Help forum, or the "First Steps" link at the top right of each page.

Closed Thread
 
LinkBack Thread Tools
Old 03-07-2008, 06:25 PM   #1 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


Registering Spybot Search & Destroy

I bought Spybot search & Destroy- I got a 16-digit reciept # and tried to use that to register the product, but it tells me it's an invalid code. Now I'm out $48, can't get a response to my emails & can't really use the program. Is there any other product out there that does the same thing that will give me what I pay for?

MJ
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 03-07-2008, 07:14 PM   #2 (permalink)
Moderator Hardware Team
 
koala's Avatar
 
Join Date: Mar 2005
Location: UK
Posts: 12,366
OS: XP/7/Ubuntu

My System

Re: Registering Spybot Search & Destroy

Where did you purchase Spybot from? It's fully functional FREEWARE available to download from http://www.safer-networking.org/en/download/index.html. I've never seen it for sale anywhere and as far as I know has always been free, although they do accept donations.

Quote:
Spybot-S&D has long grown a full-time job for me and causes quite a lot of work for our volunteers. I am working hard and it is great fun to do it. Of course all the infrastructure we use causes costs, and I have got to live on something, but at the same time I believe in free software. Therefore I decided to keep Spybot-S&D free and give you the freedom to decide if and how much it is worth to you.

If you can spare a few bucks, please donate to our cause. This is purely voluntary though - if you do not donate, you will not get less support from us.
__________________

New members: Subscribe to your thread (Thread Tools) to
receive an instant email notification when you get a reply.

TSF Folding@Home Team 85015 - details here
koala is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 05:36 AM   #3 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


Re: Registering Spybot Search & Destroy

http://www.search-and-destroy.com/spybot.html - I haven't opened a dispute with paypal- geez, I used it because it came up at thge top of the search. Hope this guy gets popped for doing this...

Last edited by tetonbob; 03-08-2008 at 01:06 PM. Reason: munged live link to questionable product
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 07:54 AM   #4 (permalink)
Moderator Hardware Team
 
koala's Avatar
 
Join Date: Mar 2005
Location: UK
Posts: 12,366
OS: XP/7/Ubuntu

My System

Re: Registering Spybot Search & Destroy

I can't get your link to open in my browser, possibly because my security software or hosts file is blocking it. If anyone else can check it out, I'd be interested to see the contents.

McAfee Site Advisor doesn't have any details on search-and-destroy.com, which is unusual, just one user review: " This is a bogus malware remover taking advantage of Spybot Search and Destroy's good name. Its probably a phishing site as well." (03/02/2008)

You need to get your computer checked out as soon as possible. Don't use the computer to go online, especially not for anything like online banking or shopping if your personal details have already been stolen. As well as PayPal, you will need to inform your bank and credit card company.

Please follow the instructions here (5 pages) and then post all the requested logs in a new thread here for the security analysts to look at. If you have any trouble running any of the scans, leave them and move onto the next.

The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted.
__________________

New members: Subscribe to your thread (Thread Tools) to
receive an instant email notification when you get a reply.

TSF Folding@Home Team 85015 - details here

Last edited by koala; 03-08-2008 at 07:56 AM.
koala is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 08:05 AM   #5 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,499
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Re: Registering Spybot Search & Destroy

I was able to view the site - looks OK, yet familiar to some other well known scams of this nature. I checked on Spyware Warrior but I can't find it listed - at least not yet. I would say this is definitely a scam, using the Spybot name as bait.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 08:09 AM   #6 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,499
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Re: Registering Spybot Search & Destroy

Hehe - noticed their use of English is slightly off..
Quote:
FAQ
What Search And Destroy does?

Search And Destroy scans your PC to find any harmfull parassite that is making your PC slow and making you crash any program you load in your laptop or desktop. Our technology is unique and guarantee the expected results by scanning and deleting any harmfull spyware and adware in your pc in few minutes, so you will have your pc fast and stable again!

What is Spyware and Adware?
As in wikipedia definition, spyware is a computer software that intercept or take partial control over your PC without your informed consent. Spyware programs can collect different kinds of information and install additional software by redirecting your internet acttivity.Spyware and adware can collect your personal data, credit card info, email storage and any personal data about yourself.
Edit:- Image for those that can't get there...

__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

Last edited by Glaswegian; 03-08-2008 at 08:14 AM.
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 08:12 AM   #7 (permalink)
Moderator Hardware Team
 
koala's Avatar
 
Join Date: Mar 2005
Location: UK
Posts: 12,366
OS: XP/7/Ubuntu

My System

Re: Registering Spybot Search & Destroy

Thanks, Iain. Do you have any more advice for gmwrick about staying offline until his logs have been analysed, or who to contact to safeguard his personal details (and money) after a phishing scam?
__________________

New members: Subscribe to your thread (Thread Tools) to
receive an instant email notification when you get a reply.

TSF Folding@Home Team 85015 - details here
koala is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 08:17 AM   #8 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,499
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Re: Registering Spybot Search & Destroy

@gmwrick

If you can, get to a known clean PC and change all passwords, logins etc. It may also be wise to advise any Banks or other organisations you use for online transactions that your card details may have been compromised.

Although you don't need to stay off the web, I would visit only safe known sites until we get your system clean.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-08-2008, 01:15 PM   #9 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,618
OS: 2000 Pro; XP Pro; XP Home


Re: Registering Spybot Search & Destroy

To anyone else who happens upon this thread....do NOT install this product, Search and Destroy, and do NOT confuse it with the well known and respected Spybot Search & Destroy.

This Search and Destroy is definitely a rogue/scamware application.

http://www.malwarebytes.org/forums/i...showtopic=3819

VirusTotal results for the installer:

http://www.virustotal.com/analisis/b...45b2f50a60f8cd

Edit to note:

Malwarebytes' AntiMalware has a free version,

http://www.malwarebytes.org/mbam.php

which among other things will remove this trash:

Malwarebytes' Anti-Malware 1.07
Database version: 470

Scan type: Quick Scan
Objects scanned: 25311
Time elapsed: 4 minute(s), 29 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 4
Files Infected: 12

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\Software\MPMFC1 (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\search and destroy5.2 (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SearchAndDestroyMFC (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\WINDOWS\Search And Destroy (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bob\Start Menu\Programs\Search And Destroy (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.

Files Infected:
C:\Documents and Settings\Bob\Desktop\SearchAndDestroy.exe (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\WINDOWS\Search And Destroy\uninstall.exe (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Search And Destroy.exe (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall\uninstall.dat (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall\uninstall.xml (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall\IRIMG1.JPG (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall\IRIMG2.JPG (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Program Files\Search And Destroy\Uninstall\IRIMG3.JPG (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bob\Start Menu\Programs\Search And Destroy\Search And Destroy.lnk (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bob\Start Menu\Programs\Search And Destroy\Uninstall Search And Destroy.lnk (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\WINDOWS\Search And Destroy Setup Log.txt (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bob\Desktop\Search And Destroy.lnk (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009

Last edited by tetonbob; 03-08-2008 at 01:27 PM.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 10:42 AM   #10 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


panda scan results

Here's what I got (saved it in notepad)- I sure can't find them with my AVG (always updated, and spybot s&d. I also went into docs & settings and can't find them- yes, I was tempted to try to delete if I could... My updates are current and other than these critters, I should be clean.

MJ


Incident Status Location

Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Owner\Cookies\owner@ad.yieldmanager[2].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Owner\Cookies\owner@ads.pointroll[1].txt
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Owner\Cookies\owner@bravenet[1].txt
Spyware:Cookie/Tribalfusion
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 10:57 AM   #11 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


Re: Registering Spybot Search & Destroy

I got to paypal in time and got my $$- will change my card # tomorrow. except for 4 items the panda scan found, I'm clean, so at least I feel fortunate to have brought attention to this phony spybot- maybe it will save someone else from an even worse fate...
MJ
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 11:02 AM   #12 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,618
OS: 2000 Pro; XP Pro; XP Home


Re: Registering Spybot Search & Destroy

Thanks for the update MJ -

Good to know you got your funds returned. Give MBAM a run, it's free and fast.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 11:54 AM   #13 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


MBAM log

Malwarebytes' Anti-Malware 1.07
Database version: 471

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 70800
Time elapsed: 37 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
This is what the malware bytes anti-malware found and removed. I think I'll run the panda one again to see if there's any difference.
MJ



HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SearchAndDestroyMFC (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{1A2A66B4-8B84-4912-A00B-83E58B33F6E4}\RP438\A0109869.exe (Rogue.SearchAndDestroy) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{1A2A66B4-8B84-4912-A00B-83E58B33F
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 01:05 PM   #14 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,618
OS: 2000 Pro; XP Pro; XP Home


Re: Registering Spybot Search & Destroy

As it turns out, our colleague Grinler at Bleeping Computer has a removal guide for this rogue, which includes the use of MBAM.

http://www.bleepingcomputer.com/malw...archanddestroy
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 01:10 PM   #15 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,618
OS: 2000 Pro; XP Pro; XP Home


Re: Registering Spybot Search & Destroy

Panda is finding only cookies, and MBAM took out what was left. You should be fine. No need for threads in the HJT forum in this case.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 01:11 PM   #16 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


Re: Registering Spybot Search & Destroy

Did another panda scan & it found nothing- I think I'm good now- we'll see...
MJ
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-09-2008, 01:13 PM   #17 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 35,618
OS: 2000 Pro; XP Pro; XP Home


Re: Registering Spybot Search & Destroy

Take a look here, and make sure your system is appropriately protected:

PC Safety and Security--What Do I Need?
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006

Microsoft MVP - Consumer Security 2009
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-12-2008, 07:59 PM   #18 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 1
OS: Vista


Re: Registering Spybot Search & Destroy

I'm very glad you got your money back - unfortunately I wasn't so lucky! I've fileed a claim with paypal but they've said there's nothing they can do...feh.
wondermelmo is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 03-13-2008, 03:01 PM   #19 (permalink)
Registered User
 
Join Date: Mar 2008
Posts: 9
OS: xp


Re: Registering Spybot Search & Destroy

Well- I haven't gotten the $$ back yet... They say they will... live & learn!
gmwrick is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT -7. The time now is 03:21 AM.



Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85