Qoolaid spyware and general question

[Guest]

My pc seems to have gotten a nasty spyware Qoolaid that I can't seem to get
rid of...norton, adaware, spybot - they say they get it and it comes right
back. Can't open IE. Any suggestions?
Also, I've noticed a bunch of things in my startup that I would like to know
if they should be there e.g. "tgkill" or "BCMSMMSG.exe" - any thoughts on how
I can tell if something is not something that I want on my computer.
Lastly, Norton identified a bunch of files associated with this spyware but
even when I get into safe mode (which took some doing) and I search the
directories using the command line, I still don't see them. Any ideas how I
can manually delete these? Thanks, in advance, for your help.
I did see a previous posting on this and will try the software it suggested
but any additional help would be appreciated.

 

[Malke]

My pc seems to have gotten a nasty spyware Qoolaid that I can't seem to
get rid of...norton, adaware, spybot - they say they get it and it comes
right
back. Can't open IE. Any suggestions?
Also, I've noticed a bunch of things in my startup that I would like to
know if they should be there e.g. "tgkill" or "BCMSMMSG.exe" - any
thoughts on how I can tell if something is not something that I want on my
computer. Lastly, Norton identified a bunch of files associated with this
spyware but even when I get into safe mode (which took some doing) and I
search the
directories using the command line, I still don't see them. Any ideas how
I
can manually delete these? Thanks, in advance, for your help.
I did see a previous posting on this and will try the software it
suggested but any additional help would be appreciated.

All the Qoolaid and Qoologic infections are nasty to remove. Run HijackThis
and post your log at one of these specialty forums (not here, please):

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 - another
tutorial
http://aumha.net/viewforum.php?f=30
http://castlecops.com/forum67.html
http://spywarewarrior.com/viewforum.php?f=5 - Spyware Warrior HijackThis
forum
http://forums.tomcoyote.org/

Malke

 

[David H. Lipman]

From: "Paully_d" <[email protected]>

| My pc seems to have gotten a nasty spyware Qoolaid that I can't seem to get
| rid of...norton, adaware, spybot - they say they get it and it comes right
| back. Can't open IE. Any suggestions?
| Also, I've noticed a bunch of things in my startup that I would like to know
| if they should be there e.g. "tgkill" or "BCMSMMSG.exe" - any thoughts on how
| I can tell if something is not something that I want on my computer.
| Lastly, Norton identified a bunch of files associated with this spyware but
| even when I get into safe mode (which took some doing) and I search the
| directories using the command line, I still don't see them. Any ideas how I
| can manually delete these? Thanks, in advance, for your help.
| I did see a previous posting on this and will try the software it suggested
| but any additional help would be appreciated.


Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.
NOTE: Registration is REQUIRED before posting a log
NOTE: Web sites NOT listed in any particular order

http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13
http://castlecops.com/forum67.html