ComputerForum.com ComputerForum.com  
Go Back   Computer Forum > Computer Software > Computer Security

Reply
 
LinkBack Thread Tools Display Modes
Old 05-11-2005, 11:58 PM   #1 (permalink)
banned
 
Join Date: Feb 2005
Posts: 1,486
Default Help Removing This!

C:\WINDOWS\msbe.dll is infected with Adware.BargainBuddy


I downloaded so emoticon's for my website and all I got was a butt load of spyware and a virus, So far I have been able to get rid of everything with ad-aware, spybot, xoftspy, and avast antivirus but when I scanned my computer with symatic online virus it came up with the bargin buddy file! I have also deleted the program that installed it also and I cannot find the infected file but when I scan with symatic it says its still there! Help me get rid of this please! Also when I deleted all infected files I had system restore shut off!
cell4me is offline   Reply With Quote


Old 05-12-2005, 12:09 AM   #2 (permalink)
banned
 
Join Date: Feb 2005
Posts: 1,486
Default

I got it I deleted the file C:\WINDOWS\msbe.dll that was created when I downloaded the program!
cell4me is offline   Reply With Quote
Old 05-12-2005, 12:31 AM   #3 (permalink)
Gold Member
 
Join Date: Oct 2004
Location: London UK
Posts: 442
Default

do you a spyware check i.e. Spybot/Spysweeper/xoftspy

if that doesnt get rid of it completely here the Symantec Security Response (instructions how to remove it)

http://sarc.com/avcenter/venc/data/a...gainbuddy.html

also do a HijackThis and a post a long here so i or others can have a look.
__________________
DAN 3:16
dansilva is offline   Reply With Quote
Old 05-12-2005, 12:41 AM   #4 (permalink)
Gold Member
 
Join Date: Oct 2004
Location: London UK
Posts: 442
Default

ok here is another detailed version of how to get rid of this spyware

http://www.pchell.com/support/bargainbuddy.shtml
__________________
DAN 3:16
dansilva is offline   Reply With Quote
Old 05-12-2005, 03:55 AM   #5 (permalink)
banned
 
Join Date: Feb 2005
Posts: 1,486
Default

I just deleted this file (C:\WINDOWS\msbe.dll) and then did a scan with every program I have and so far looks like I have a clean pc
cell4me is offline   Reply With Quote


Old 05-12-2005, 03:59 AM   #6 (permalink)
Platinum Member
 
Scrat's Avatar
 
Join Date: Aug 2004
Location: Sydney, Australia
Age: 27
Posts: 630
Default

Have you run the "Imunise" tool in Spybot? if not it would be a good idea to do it. You can also enable the "TeaTimer" function, which warns you before letting any program modify the registry.
__________________
AMD Athlon 64 3500+, GigaByte GA-K8NS Ultra-939 Ltd Ed.
ATI Radeon GeCube 256Mb 9600XT, Compro DVB-T300 Dig/Analog TV Card
2x 1GB, 2x 512Mb DDR CL3 400Mhz PC3200 - Dual Channel
WD 120Gb SATA 7200rpm 8MB, WD 80Gb SATA 7200rpm 8MB
Excel 108Mb Wireless PCI, WinXP Prof.
Samsung CD-R/RW 52-32-52, Samsung DVD 16x reader, LG DVD MultiBurner
Benq 17" FP71E 12ms LCD, Logitech LX700 K&M, Logitech G25 Racing Wheel, Logitech Z-5400
FOLDING FOR THE GOOD OF MANKIND!! Team 44358
Scrat is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

All times are GMT +1. The time now is 03:02 AM.


Powered by: vBulletin Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 ©2008, Crawlability, Inc.
Copyright © 2002-2008 Computer Forum and Web Design Forum