need to remove XSRemover.com; WorldAntiSpy.com; WinHoun.com and PSGuard.com

I have a long distance friend I am trying to help remove some desktop 
hijackers.  The info online is limited. I have found that some of those are 
desktop hijackers.

I told the person to check Add Remove to see if those are installed and run 
Ad Aware Se and Spybot Search and Destroy.  Is there a remover for those or 
a place that tells how to manually clean up the machine.

-- 
Firewire 


0
Firewire
12/8/2005 4:16:51 PM
grc.security 16608 articles. 3 followers. Follow

4 Replies
1048 Views

Similar Articles

[PageSpeed] 46

"Firewire" <firewire@nowhere.invalid> wrote in message 
news:dn9m9d$m0q$1@news.grc.com...
>I have a long distance friend I am trying to help remove some desktop
> hijackers.  The info online is limited. I have found that some of those 
> are
> desktop hijackers.
>
> I told the person to check Add Remove to see if those are installed and 
> run
> Ad Aware Se and Spybot Search and Destroy.  Is there a remover for those 
> or
> a place that tells how to manually clean up the machine.
>
> -- 
> Firewire


I forgot to repeat the malware names in the body of this post.  Here they 
are again. XSRemover.com; WorldAntiSpy.com; WinHoun.com and PSGuard.com

-- 
Firewire 


0
Firewire
12/8/2005 4:32:26 PM
Firewire wrote:

> "Firewire" <firewire@nowhere.invalid> wrote in message 
> news:dn9m9d$m0q$1@news.grc.com...
> 
>>I have a long distance friend I am trying to help remove some desktop
>>hijackers.  The info online is limited. I have found that some of those 
>>are
>>desktop hijackers.
>>
>>I told the person to check Add Remove to see if those are installed and 
>>run
>>Ad Aware Se and Spybot Search and Destroy.  Is there a remover for those 
>>or
>>a place that tells how to manually clean up the machine.
>>
>>-- 
>>Firewire
> 
> 
> 
> I forgot to repeat the malware names in the body of this post.  Here they 
> are again. XSRemover.com; WorldAntiSpy.com; WinHoun.com and PSGuard.com
> 

Some help from the fine folks (specifically, Dave) at alt.comp.virus:

   (http://www.claymania.com/removal-trojan-adware.html)

Ron :)
0
Ron
12/8/2005 4:52:11 PM
"Ron Lopshire" <notron@ovbl.org> wrote in message
news:dn9obq$nt4$1@news.grc.com...
> Firewire wrote:
>
>> "Firewire" <firewire@nowhere.invalid> wrote in message
>> news:dn9m9d$m0q$1@news.grc.com...
>>
<snip>
> I forgot to repeat the malware names in the body of this post.  Here they
>> are again. XSRemover.com; WorldAntiSpy.com; WinHoun.com and PSGuard.com
>>
>
> Some help from the fine folks (specifically, Dave) at alt.comp.virus:
>
>   (http://www.claymania.com/removal-trojan-adware.html)
>

Thanks Ron. That is a keeper.  I know some of that info but finding it on a
site to share with others is a good catch.

Firewire



0
Firewire
12/8/2005 5:34:42 PM
Firewire wrote:

> "Ron Lopshire" <notron@ovbl.org> wrote in message
>>
>>Some help from the fine folks (specifically, Dave) at alt.comp.virus:
>>
>>  (http://www.claymania.com/removal-trojan-adware.html)
>>
> 
> Thanks Ron. That is a keeper.  I know some of that info but finding it on a
> site to share with others is a good catch.
> 
> Firewire
> 
> 
> 

YW :)
0
Ron
12/9/2005 4:28:10 PM
Reply:

Similar Artilces:

geobutton.com geoup.com, geobytes.com networldmap.com?
Do these website have the potensial for privacy 'invasion'? If you just to be on the safe side want them in your host file (I did a DNS Zone Query): # Geobutton.com 127.0.0.1 geobutton.com 127.0.0.1 radev.geobutton.com 127.0.0.1 devadmin.geobutton.com 127.0.0.1 ra.geobutton.com 127.0.0.1 new.geobutton.com 127.0.0.1 comdev.geobutton.com 127.0.0.1 buttondev.geobutton.com 127.0.0.1 mail.geobutton.com 127.0.0.1 www.geobutton.com 127.0.0.1 image.geobutton.com 127.0.0.1 dev.geobutton.com 127.0.0.1 button.geobutton.com 127.0.0.1 map.geoup.com # Geoup.com ...

COM/COM+ component
Hi Does anyone have an simple example of COM/COM+ component and the way to use it ? cheer <Muriel> wrote in message news:417783cf.293.1681692777@sybase.com... > Hi > > Does anyone have an simple example of COM/COM+ component and > the way to use it ? > > cheer Check the ole-ocx-activex group. There are also several examples in the help documentation. -- Paul Horan[TeamSybase] ...

COM/COM+ Components
We are planning to deprecate the COM/COM+ component wizard in PowerBuilder 11.5. Alternatives are deploying your NVO as a .NET Web Service or as a .NET Assembly. Would removing this feature have an impact on you? Regards, Dave Fish Sybase PowerBuilder Blog: http://powerbuilderevangelist.blogspot.com/ Yes certanily. We are using many many COM/COM+ components. "Dave Fish [TeamSybase]" <n0Spam__dfish@sybase.com> ha scritto nel messaggio news:ch2j24tdfqbfua264mmrnu2d3isrm1clug@4ax.com... > We are planning to deprecate the COM/COM+ component wizard in >...

What is COM/COM+/DCOM
Hi All, What is concept behind COM, COM+ and DCOM, Plz discuss in detail... Thanx in advance SajjadPlease Mark as Answer, if the post Solve your Problem__________________________Regards,Sajjad RizviC U ON NETreply me : sajjaddotnet@yahoo.com Sajjad, please do not ask us to do your homework for you. The following will provide you with a good start: http://en.wikipedia.org/wiki/Component_object_model Alister but why ???? Because this forums for asking the Question.... Any thing Wrong... (Thanx for Link)Please Mark as Answer, if the post Solve your Problem_____________________...

Sending to aol.com , gmail.com, and yahoo.com
I'm running GroupWise 7.0. I have a Firewall and a CISCO router. We have all SMTP traffic pointing to the local IP address of the GroupWise server. At are website hosting company we have a MX record setup to point to an open Internet IP addres from are ISP. So when someone email us it comes from the internet IP address to are firewall to are local ip address. We are having proplem send to aol.com, yahoo.com, and gmail.com. How do I solve this. Also getting some host down issue and the host that is down is are .com address. Please help I had the same issue and we h...

COM/COM+ Components
We are planning to deprecate the COM/COM+ component wizard in PowerBuilder 11.5. Alternatives are deploying your NVO as a .NET Web Service or as a .NET Assembly. Would removing this feature have an impact on you? Regards, Dave Fish Sybase PowerBuilder Blog: http://powerbuilderevangelist.blogspot.com/ Dave; By this you mean allowing PB to build a COM Server? Chris "Dave Fish [TeamSybase]" <n0Spam__dfish@sybase.com> wrote in message news:gm2j24hk7o0pedrhc3kudlg2tqdgs8hjei@4ax.com... > We are planning to deprecate the COM/COM+ component wizard i...

c.microsoft.com c2.microsoft.com crl.microsoft.com
Windows-update and various security patch downloads all access some or all of the URL's c.microsoft.com c2.microsoft.com and crl.microsoft.com. I suspected these URL's to do some information-snooping so I blocked all requests to the internet. I was somewhat surprised to find that everything was working completely as before. So my question is: does anyone here know what these URL's are used for? As far as I know c.microsoft.com serves webbugs, and only webbugs. Never found anything from the other two servers you mentioned. Where did they show up and what did they serve? ...

SmtpClient , sending mails to @gamil.com or @yahoo.com or @anyOtherThing.com
i am creating a  SmtpClient as follows    Dim Client As New SmtpClient("mycompany.com")it work fine for all  ids end with  @mycompany.com  (i mean the To field) but it throws an exception  when i send mails to  ids ending with  @gamil.com or  @yahoo.com  or @anyOtherThing.comand the exception.message is  'Thread was being aborted.  how can i get escape  Check your SMTP server settings and check the SMTP server logs.  My guess is you're not allowed to forward outside your domain. JeffPlease: Don't for...

FireFox locks up when using Drudgereport.com/breitbart.com/g.thinktarget.com
Name: Jim Blood Email: jimblood_at_macserve.net Product: Firefox Summary: FireFox locks up when using Drudgereport.com/breitbart.com/g.thinktarget.com Comments: Sirs; I traced my problem back to your banner ad that g.thinktarget.com is running on behalf of breitbart.com when I click on a drudgereport.com article. I am passing your banner ad webpage on to a list of FireFox users so that they too can be aware that everytime the g.thinktarget.com URL appears it forces me to shut down my FireFox application. Now this doesn't happen with Mozilla, but I've got a lot of ...

PB COM components in COM+
Is there any way to successfully utilize COM+ transaction management via a COM component built in PB7 ? No. Following Microsoft info, and my own tests, COM+ are actually supported only by VB and Ms C++. In PB, GetContextService call always return -1. "Robert Ranck" <reranck@cmds.com> wrote in message news:XR#daMQRAHA.162@forums.sybase.com... > Is there any way to successfully utilize COM+ transaction management via a > COM component built in PB7 ? > > > ...

Santry.com and WWWCoder.com
Does anyone know what's going on with Patrick Santry's websites? He was supposedly going to post a patch for some RSS problems RDM but all of the sudden all of his websites aren't working. Cheers, Vince Vince view post 683025 Nik KalyaniSpeerio, Inc.[DotNetNuke and ASP.Net solutions here] Thanks. Sorry about the double post. I did some searches but didn't find anything. Your help is appreciated. V2 Vince...

Slate.com and Amazon.com
Name: Product: Firefox Summary: Slate.com and Amazon.com Comments: I use windows xp service pack 3. Since the release of version 3.5.something, Firefox has not worked correctly at Slate.com; specifically, it will display the pictures at the top of the Today in Slate page. Some of these pictures act as buttons, but they don't respond to clicking. I don't know how long this has been going on, but the drop down list at Amazon.com doesn't work. Instead of having to click once, I have to double click on the menu. Browser Details: Mozilla/5.0 (Windows; U; Windows...

Itunes.com or Apple.com
Name: Nick Blankenship Email: gardianangel_333atyahoodotcom Product: Gran Paradiso Alpha 8 Summary: Itunes.com or Apple.com Comments: I have had a hard time downloading things from Itunes.com or Apple.com Browser Details: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9b2) Gecko/2007121120 Firefox/3.0b2 ...

targemni.com ?? Anilomed.com : ?????? ???????? , ????? ??? ???? , ???? ?? ???? , ????? ??????, ???????
Name: Abelvebet Email: 13at32updotcom Product: eBay Companion Summary: targemni.com ?? Anilomed.com : ?????? ???????? , ????? ??? ???? , ???? ?? ???? , ????? ??????, ??????? Comments: ??? ??? ????? ???? ????? ?????? ??? <a href=http://anilomed.com><b>????? ??????</b></a> ????? ????? ????? ???? ?????? ????? ????? ?' ??? ?? ???? ??? ????? ???? ??????, ???? ???? ??????? ????? ?? ???? ??????. ????? ??? ???? ????? ???? ??? ???? ???? ????? ????? ?????? ??? ???? ????? ???? ????? ??? ???? ????! ??? ????? ?65 ?80 ! ???? ?????! <a href=http://www.a...

Web resources about - need to remove XSRemover.com; WorldAntiSpy.com; WinHoun.com and PSGuard.com - grc.security

Resources last updated: 12/24/2015 8:41:36 PM