October 20, 200421 yr Look at picture. Help me out, can't get rid of these, and I NEVER downloaded Coldplay (eww) or anything to the extent of that file. Running Spyware and adware right now.
October 20, 200421 yr vbargains - bargains.exe - Process Information Process File: bargains or bargains.exe Process Name: Bargains Spyware Description: bargains.exe is a spyware which generates pop-up advertisements and analyses your computer usage for analysis by Exact Advertising. This program is a registered security risk and should be removed immediately. Please see additional details regarding this process Author: Exact Advertising Part Of: Exact Advertising SpyWare System Process: No Background Process: No Uses Network: Yes Hardware Related: No Common Errors: N/A Security Risk (0-5): 2 Virus: No Spyware: Yes The Dog is related to Cashback.exe and this is a REAL bitch to get rid of... goto finners page and get Hijack this,., Follow HERE for removal instructions, with Hijack this,... http://computercops.biz/postp337686.html Alias: CashBack Buddy, CashBackBuddy, CashBack by BargainBuddy Threat type: Adware - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance. Threat risk: High Risk High risk threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction. May open up communication ports, use polymorphic tactics, stealth installations, and/or anti-spy counter measures. May us a security flaw in the operating system to gain access to your computer. Description: CashBack is part of BargianBuddy adware that isplays popup advertisements. CashBack causes a number of system errors and forces automatic reboots of your computer without your intervention. Installs other spyware threats such as Bullseye and NaviSearch404. "CashBack displays search listings in a window in the background on the computer screen. These listings are displayed as a "search helper" when a user has typed text into the address bar that would normally resolve to a "404 Page not found". The search helper tries to deduce what content the user was searching for, and present relevant results. You may also see search results as a pop-up/under as a helper when you enter terms into a search bar or go to certain targeted sites." http://www.giantcompany.com/files/GiantAntiSpyware.exe This detects and removes it, its a 15day free trial if Adaware and Spybot dont,
October 20, 200421 yr You have Bigger associated problems here as well Socky Process File: nls.exe Process Name: Win32.Agent.y Description: nls.exe is an advertising program by Webrebates. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately. Please see additional details regarding this process Author: na Part of: Win32.Agent.y Spyware System Process: No Application: No Background Process: Yes Uses Network: Yes Uses Internet: No Hardware Related: No Virus: No Trojan: No Spyware: Yes Security Risk (0-5): 2 This is also spyware that has been installed by the Cashback program, Can you open up Task manager, Expand it until ALL the fields are visable in processes, and sort by "user name" (click on teh username field up top) and post another Screenshot of it please? i think (fear) you may have larger problems than the obvious 2!
October 20, 200421 yr It might have come from your crack(1) directory, if that is what it sounds like it is.
October 20, 200421 yr what is crack(1) directory? On his desktop... I'm just guessing it was a no-CD crack or something along those lines.
October 20, 200421 yr ok, my post went as well, methinks something is up.edit: just saw it, bottom left one, i doubt, cracks dont usually contain spyware, more like someone downloaded a dialer or internet bar,
October 20, 200421 yr Author Please get that screenshot of your FULL program/system task list up please, MSN, computer crashed
October 20, 200421 yr List of processes on your system that are linked to spywareBargains.exeCashback.exe **webrebates0.exewebrebates1.exeexdl2.exensl.exe **--i think-- zurudil.exeUltimatly this infection stems from a website you ahve view or something you have DLed. from a malware website.This situation i can only really recomend a FULL format or take the PC into the shop and let them run Hijack This on it.
October 20, 200421 yr I had this same spyware on my PC. I didnt try the Hijack program Shotty referred to, but spybot did not take care of it, finally did a full reformat/reinstall.
October 20, 200421 yr There is a program I have been researching called Giant Anti-Spyware that picks up more than any other anti-spyware out there. It is free for like 15 day I think. I run it and found stuff the others missed. You may try that...also used the immunize funtion of S&D. Be warned thought it blocks some pornographic web pages.
October 21, 200421 yr Hijack This is awesome. I'd also try running multiple anti-spyware programs at once, just to get everything.
October 21, 200421 yr aha. i have those too wsae. Bargains.exe, cashback.exe and the dog iconi had no idea what the dog was, just guessed it was from my sisters. it wasnt.it was spyware
October 21, 200421 yr Cant they just make spyware illegal or so? Becouse you get infected so fast that it isnt fair anymore
October 21, 200421 yr Statecop looksie at my reply (one of th first ones) i list giant spyware killer in there.
October 21, 200421 yr they actually are attempts to take legal action now, its just the law takes a long time to catch up with the waythings actually work
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.