Welcome Guest ( Log In | Register)



 
Reply to this topicStart new topic
> I Need Help With A Spyware!, Infected my windows folder
Amezis
post Apr 11 2005, 07:38 PM
Post #1


Privileged Member
*********

Group: Members
Posts: 535
Joined: 14-February 05
From: Oslo, Norway
Member No.: 3,759



well, I got a spyware on my other computer.

First, I searched with Ad-Aware, then with Norton Antivirus.
Antivirus detected a spyware that Ad-Aware didn't detect, named "Spyware.Marketscore".

But it can't repair the file or delete or whatever.

And I know that the spyware is installed with another program I installed for some weeks ago, but I have uninstalled the program now. But the spyware is still there.

The infected file can be found in %Windows%/system32/osmim.dll

Can someone help me?

And do you have the file osmim.dll too?

I need to know if I can delete the file straight away, or if it's a system file.
Go to the top of the page
 
+Quote Post
NilsC
post Apr 11 2005, 08:26 PM
Post #2


Administrator
*********

Group: Members
Posts: 377
Joined: 28-December 04
From: USA
Member No.: 2,992



30day trial of pestpatrol should be able to help you out with that one.

http://www3.ca.com/securityadvisor/pest/

you can try to download stinger and run that one also:

av tools stinger

Nils
Go to the top of the page
 
+Quote Post
bureX
post Apr 11 2005, 08:42 PM
Post #3


Super Member
*********

Group: Members
Posts: 318
Joined: 5-January 05
Member No.: 3,136



If Norton Antivirus cannot repair/delete it, you can try scanning your system in safe mode (press F8 while booting, and select "safe mode" from the boot menu that will appear). Make sure that you have updated all of your antivirus and spyware removal programs before doing any scanning.

You can also try to do a scan with Microsoft's beta version of "AntiSpyware"... It discovered a few things that AdAware did not, despite the fact that it's spyware definitions were up to date.

BTW: I don't have the "osmim.dll" file in my System32 folder (I am using Windows XP with Service Pack 2).
Go to the top of the page
 
+Quote Post
no9t9
post Apr 11 2005, 10:37 PM
Post #4


Privileged Member
*********

Group: Members
Posts: 773
Joined: 4-November 04
Member No.: 2,118



a simply google search will reveal many solutions. here is one step by step for removal of this pest.

http://www.ait.iastate.edu/faq/view.php?id=615
Go to the top of the page
 
+Quote Post
RGPHNX
post Apr 11 2005, 10:50 PM
Post #5


Super Member
*********

Group: Members
Posts: 380
Joined: 22-December 04
From: usa
Member No.: 2,873



Hi Amezis,
you might also try "Spybot Search & destroy" program. If it can't delet the bug automatically.. then you might want to post back & tell us which version of Windows you'r using so someone can look for the dll file (ie.
QUOTE
%Windows%/system32/osmim.dll
)
you referenced. That way we might be able to tell if it can be "safely" deleted.
Hope this helps,
RGPHNX
PS-post back & let everyone know how the problem was resolved... so others can learn from your experience.
Go to the top of the page
 
+Quote Post
Amezis
post Apr 12 2005, 12:05 PM
Post #6


Privileged Member
*********

Group: Members
Posts: 535
Joined: 14-February 05
From: Oslo, Norway
Member No.: 3,759



It's service pack 1.

BureX, I have already tried to scan in safe mode. Well, I'll try the other programs and I'll post a reply if it's fixed. (or if it isn't)
Go to the top of the page
 
+Quote Post
Amezis
post Apr 13 2005, 01:11 PM
Post #7


Privileged Member
*********

Group: Members
Posts: 535
Joined: 14-February 05
From: Oslo, Norway
Member No.: 3,759



Lol I just deleted it - it's gone tongue.gif
Go to the top of the page
 
+Quote Post
RGPHNX
post Apr 13 2005, 03:48 PM
Post #8


Super Member
*********

Group: Members
Posts: 380
Joined: 22-December 04
From: usa
Member No.: 2,873



Hi Amezis,
You just deleted it HOW? re:
QUOTE
Lol I just deleted it - it's gone

What program did you use OR did you delete it manually??
Please post back details... so other members can benefit from your experience.
RGPHNX
Go to the top of the page
 
+Quote Post
Amezis
post Apr 14 2005, 04:22 PM
Post #9


Privileged Member
*********

Group: Members
Posts: 535
Joined: 14-February 05
From: Oslo, Norway
Member No.: 3,759



manually... Nothing special happened, everything run well...

Except ONE thing: the internet is now working alot better!
Go to the top of the page
 
+Quote Post
Styx