Re: Opinions sought re virus ?

From: "TaurArian [MS-MVP]" <taurarianREMOVECAPS@xxxxxxxxx>

| Hi Dave, update on the infected computer. I checked with Spybot and undercovered
| registry entries marked under the name of "CyberDefender".
| A quick google indicated there is a legitimate program named Cyber Defender. Could
| not locate anything specific in add/remove.
| Trend has picked up nothing about this program in its scans.

| Whatever it is it's affecting internet usage (dial up). Sometimes OE fails to open,
| sometimes IE cannot find provider. Shortly after this, the computer locks up.

| If I remove the registry keys, OE will open but "Trend Antispam" then has a runtime
| error. If I put the registry keys back, Trend is okay.
| OE will fail to open again. Then perhaps after a few tries, OE eventually opens.

| The disconnect when idle, only appears occasionally even though it's set to appear
| when no longer needed.

| Neither myself or the owner downloaded "CyberDefender" from the manufacturers site.
| Will investigate next week when the dealer is opened if they ever installed it.

| Interesting that it's being detected as "spyware".

| I don't understand it.

| Kaylene




Happy New Year Kaylene.

Cyber Defender was at one time listed as a Rogue but was de-listed [ 12/27/05 ].
http://www.spywarewarrior.com/rogue_anti-spyware.htm#cybdef_note


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.

Relevant Pages

  • Re: Opinions sought re virus ?
    ... update on the infected computer. ... || registry entries marked under the name of "CyberDefender". ... Then perhaps after a few tries, OE eventually opens. ... why is Spybot detecting it as a threat? ...
    (microsoft.public.security.virus)
  • Re: Fixing Mail Merge header files
    ... Much as I dislike these warnings and the registry fix necessary to get rid ... opens a header source or data source, it may be using software that is not ... with an attached Header file but no attached data ...
    (microsoft.public.word.mailmerge.fields)
  • Re: OldNormal.dot Only Worked Once
    ... it is the same Steve that you helped late last week. ... The problem as previously stated in second posting is it only works once ... Let's start with the Registry first. ... I also tried 'start','run','winword /a' and that no longer opens ...
    (microsoft.public.office.misc)
  • Re: XP Tweak not working--- Bootup Problem
    ... this will resolve the issue. ... registry damage it will not. ... >I was recently directed to the "System32 Folder Opens Upon ...
    (microsoft.public.windowsxp.general)
  • Re: Word 2000 needs to close - error with ms09.dll and more...
    ... Those include the two Registry keys I previously provided. ... word bombs with same error message. ... File opens fine. ...
    (microsoft.public.word.application.errors)