Anybody know a good guide for getting rid of this thing? Malwarebytes will
clean it, but it's restored when the computer restarts.

Hello,

Have you tried SuperAntiSpyware? It is free
http://www.superantispyware.com/

Regards,
Singapore Computer Home Repair Service
http://www.bootstrike.com/ComputerService/
Video Conversion VHS Video8 Hi8 Digital8 MiniDv MicroMv
http://www.bootstrike.com/VHSVideoConvert/
"RKH" <(E-Mail Removed)> wrote in message
news:5uvam.798210$yE1.636138@attbi_s21...
> Anybody know a good guide for getting rid of this thing? Malwarebytes
> will clean it, but it's restored when the computer restarts.
>

On Sat, 25 Jul 2009 08:21:52 -0700, "The Real Truth MVP"
<(E-Mail Removed)> wrote:

>Use my Remove-it software, it will remove that malware from your system.
>Choose yes for all options when prompted. Download it here
>http://www.ms-mvp.org/

Correction: That should read "DON'T use that software." It's stolen
and you can't trust it.

Cawme

In article <Mt-(E-Mail Removed)>, (E-Mail Removed)
says...
>
> Use my Remove-it software
>

Well, not a single person will download your pirated code now that you
exposed yourself as the PIRATE/THIEF we all have said you are.

The file you claim to have known about, claim to have submitted to anti-
virus sites, the file named "obatssrsghde.exe" was a marker inserted
into Stuarts batch file you stole from him, it was is a KEY that proves
you're a thief:

For those that don't know, Stuart inserted the obatssrsghde.exe marker
into his batch file to prove, to the community, that PCBUTTS1 / The Real
Truth MVP is actually a lying thief, and PCBUTTS admitted in his own
post that he created the marker and claimed to know what it was - even
claimed to have submitted the malware to anti-virus vendors, but the
joke was on him, Stuart told everyone in the community about it BEFORE
it appeared in PCBUTTS1 download.... There is no actual file named
obatssrsghde.exe in the malware community, it was a ruse.

The key is in the spelling:

obatssrsghde.exe
pcbuttsthief

If you change (add) 1 character to each letter you will see that
"obatssrsghde" is actually the marker "pcbuttsthief" - proving that
PCBUTTS1 is a thief.

Are there other markers - YES, does PCBUTTS1 know about them - know,
they've been there for a long time, but this is the most obvious one.

Face it Chris/PCBUTTS1/TRT, you've exposed yourself in public.

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
(E-Mail Removed) (remove 999 for proper email address)

"The Real Truth MVP" <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> From my blog dated July 2008.
> http://pcbutts1-therealtruth.blogspot.com/
>
>
> gur ebg pbqr jnf yrnxrq gb fghneg nsgre guvf enaqbz svyr anzr fubjrq
> hc. V sbhaq vg vebavp
>
>
>

Nice try Chris... Hehe, but bro, the cats out of the bag; Even the newbies
know your a wannabe now.


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org

"The Real Truth MVP" <(E-Mail Removed)> wrote in
news:(E-Mail Removed):

> From my blog dated July 2008.
> http://pcbutts1-therealtruth.blogspot.com/
>
>
> gur ebg pbqr jnf yrnxrq gb fghneg nsgre guvf enaqbz svyr anzr fubjrq
> hc. V sbhaq vg vebavp
>
>
>

Your best bet would be to go crawl in a hole somewhere and hope over time
that you are forgotten. You got caught with your pants down Chris. You
tried to submit a bullshit sample to us; My "researcher" position gives
me access to anything anyone submits for our analysis. You couldn't
explain what the malware file did, where it originated from or anything
else. Many of us knew the entire time it didn't originate anywhere; as it
doesn't even exist. It's a forgery, intended and specifically designed to
set your stupid arse up; which it did, very well I might add.

Now that I dropped the dime and told you the "key" to it, your trying to
say you knew this all along; Bullshit. You reak so badly of bullshit now,
you need to be dunked in a bleach pool.


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org

I seem to have gotten rid of most of it by way of a full scan using
Malwarebytes (thanks Singapore). The scan eliminated whatever was causing
the initial sypmtoms (I no longer get the system security warnings). I
still have a couple of annoying symptoms, however. I get an error message
on startup which says "svchost.exe has encountered a problem and needs to
close", and secondly, a restart also wipes my username and PW from website
forums, which I then have to re-enter to log in. It's odd because it
doesn't do that with the one paysite I currently have a membership to.
Also, I'm still finding about 8 infected files (instead of 11 or 12 as
before) when I run the Malwarebytes scan on startup. So while the computer
is functioning decently, something is still amiss. Anyone have any ideas
about this?

Thanks for any input.


"RKH" <(E-Mail Removed)> wrote in message
news:5uvam.798210$yE1.636138@attbi_s21...
> Anybody know a good guide for getting rid of this thing? Malwarebytes
> will clean it, but it's restored when the computer restarts.
>

In article <(E-Mail Removed)>, (E-Mail Removed)
says...
> From my blog dated July 2008
>

Well, not a single person will download your pirated code now that
you've exposed yourself as the PIRATE/THIEF we all have said you are.

The file you claim to have known about, claim to have submitted to anti-
virus sites, the file named "obatssrsghde.exe" was a marker inserted
into Stuarts batch file you stole from him, it was is a KEY that proves
you're a thief:

For those that don't know, Stuart inserted the obatssrsghde.exe marker
into his batch file to prove, to the community, that PCBUTTS1 / The Real
Truth MVP is actually a lying thief, and PCBUTTS admitted in his own
post that he created the marker and claimed to know what it was - even
claimed to have submitted the malware to anti-virus vendors, but the
joke was on him, Stuart told everyone in the community about it BEFORE
it appeared in PCBUTTS1 download.... There is no actual file named
obatssrsghde.exe in the malware community, it was a ruse.

The key is in the spelling:

obatssrsghde.exe
pcbuttsthief

If you change (add) 1 character to each letter you will see that
"obatssrsghde" is actually the marker "pcbuttsthief" - proving that
PCBUTTS1 is a thief.

Are there other markers - YES, does PCBUTTS1 know about them - know,
they've been there for a long time, but this is the most obvious one.

Face it Chris/PCBUTTS1/TRT, you've exposed yourself in public.

--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
(E-Mail Removed) (remove 999 for proper email address)

"RKH" <(E-Mail Removed)> wrote in news:YfLam.202664$DP1.62469@attbi_s22:

> I seem to have gotten rid of most of it by way of a full scan using
> Malwarebytes (thanks Singapore). The scan eliminated whatever was
> causing the initial sypmtoms (I no longer get the system security
> warnings). I still have a couple of annoying symptoms, however. I
> get an error message on startup which says "svchost.exe has
> encountered a problem and needs to close", and secondly, a restart
> also wipes my username and PW from website forums, which I then have
> to re-enter to log in. It's odd because it doesn't do that with the
> one paysite I currently have a membership to. Also, I'm still finding
> about 8 infected files (instead of 11 or 12 as before) when I run the
> Malwarebytes scan on startup. So while the computer is functioning
> decently, something is still amiss. Anyone have any ideas about this?
>
> Thanks for any input.

http://www.malwarebytes.org/forums/

This is probably where you should have started in the first place. We tend
to know our software better than someone may on usenet. IE: You'll get the
help you need from there.



--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org

RKH wrote:
> I seem to have gotten rid of most of it by way of a full scan using
> Malwarebytes (thanks Singapore). The scan eliminated whatever was
> causing the initial sypmtoms (I no longer get the system security
> warnings). I still have a couple of annoying symptoms, however. I
> get an error message on startup which says "svchost.exe has
> encountered a problem and needs to close", and secondly, a restart
> also wipes my username and PW from website forums, which I then have
> to re-enter to log in. It's odd because it doesn't do that with the
> one paysite I currently have a membership to. Also, I'm still finding
> about 8 infected files (instead of 11 or 12 as before) when I run the
> Malwarebytes scan on startup. So while the computer is functioning
> decently, something is still amiss. Anyone have any ideas about this?
>
> Thanks for any input.
>
>
Try the free version of SAS (SuperAntiSpyware).