Spyware/malware with "-------------" keypress

A

albertleng

Dear all,

I've been bothered by this for few days and i cant carry on with my
work now due to this. I'm extremely annoyed. please help.

It all started by i downloaded an intcodec from a website. Then,
everytime i opened my browser, a page something like
"www.securitypage.com" popped out asking me to clear some
viruses/malware. Then, i downloaded ewigo anti-spyware and SmitfraudFix
(by S!Ri). I followed the instrcutions and somehow successfully removed
the spyware using ewigo and Smitfraudix.

Now, one more thing happened which i think should be related to the
intcodec spyware. Everytime i log on to my Windows (XP SP2), it seems
like "----------------" is being pressed automatically. The
"--------------" will appear whenever there's a cursor on my IE, Excel,
VB6, word and basically all applications which can accept keyboard
typing. This symptom is really annoying that i cant even do anything
for my work now. I tried top restore my system to the earlier system
point but the System Restore didnt work and even make the symptom more
severe.

Can a kind soul out that do me a favour by showing me way to solve
this?

THANK YOU VERY VERY MUCH!

Albert Leng
 
D

DL

Codecs abtained from many web sites are riddled with spyware
When a sys is infected you should turn off sys restore, as should you use it
the infection will be reinstalled.
Only turn on when you are sure your sys is clean
See below, from an earlier post
--------------------------------------
If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode.
This way all the components can be downloaded from each AV vendor's web
site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.

You can choose to go to each menu item and just download the needed files or
you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to
run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *
 
M

mayers57

DL said:
Codecs abtained from many web sites are riddled with spyware
When a sys is infected you should turn off sys restore, as should you use it
the infection will be reinstalled.
Only turn on when you are sure your sys is clean
See below, from an earlier post
--------------------------------------
If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode.
This way all the components can be downloaded from each AV vendor's web
site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.

You can choose to go to each menu item and just download the needed files or
you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to
run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


albertleng said:
Dear all,

I've been bothered by this for few days and i cant carry on with my
work now due to this. I'm extremely annoyed. please help.

It all started by i downloaded an intcodec from a website. Then,
everytime i opened my browser, a page something like
"www.securitypage.com" popped out asking me to clear some
viruses/malware. Then, i downloaded ewigo anti-spyware and SmitfraudFix
(by S!Ri). I followed the instrcutions and somehow successfully removed
the spyware using ewigo and Smitfraudix.

Now, one more thing happened which i think should be related to the
intcodec spyware. Everytime i log on to my Windows (XP SP2), it seems
like "----------------" is being pressed automatically. The
"--------------" will appear whenever there's a cursor on my IE, Excel,
VB6, word and basically all applications which can accept keyboard
typing. This symptom is really annoying that i cant even do anything
for my work now. I tried top restore my system to the earlier system
point but the System Restore didnt work and even make the symptom more
severe.

Can a kind soul out that do me a favour by showing me way to solve
this?

THANK YOU VERY VERY MUCH!

Albert Leng

I have a virus/spyware removal instruction sheet that you may find
useful. Go to my website and in the very lower left hand corner is a
link to article called "Virus Help". Let me know if that works.. Good
Luck.. Mike
http://www.ayersdesk.com
 
A

albertleng

Hi DL,

I followed the instructions and it took me almost 2 hours to finish.
Sigh...
Well, my laptop seems OK now. I have used it for almost 5 hours without
any problems...

Thanks a lot.
Albert said:
Codecs abtained from many web sites are riddled with spyware
When a sys is infected you should turn off sys restore, as should you use it
the infection will be reinstalled.
Only turn on when you are sure your sys is clean
See below, from an earlier post
--------------------------------------
If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode.
This way all the components can be downloaded from each AV vendor's web
site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.

You can choose to go to each menu item and just download the needed files or
you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to
run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


albertleng said:
Dear all,

I've been bothered by this for few days and i cant carry on with my
work now due to this. I'm extremely annoyed. please help.

It all started by i downloaded an intcodec from a website. Then,
everytime i opened my browser, a page something like
"www.securitypage.com" popped out asking me to clear some
viruses/malware. Then, i downloaded ewigo anti-spyware and SmitfraudFix
(by S!Ri). I followed the instrcutions and somehow successfully removed
the spyware using ewigo and Smitfraudix.

Now, one more thing happened which i think should be related to the
intcodec spyware. Everytime i log on to my Windows (XP SP2), it seems
like "----------------" is being pressed automatically. The
"--------------" will appear whenever there's a cursor on my IE, Excel,
VB6, word and basically all applications which can accept keyboard
typing. This symptom is really annoying that i cant even do anything
for my work now. I tried top restore my system to the earlier system
point but the System Restore didnt work and even make the symptom more
severe.

Can a kind soul out that do me a favour by showing me way to solve
this?

THANK YOU VERY VERY MUCH!

Albert Leng
 
D

DL

Glad its OK now

albertleng said:
Hi DL,

I followed the instructions and it took me almost 2 hours to finish.
Sigh...
Well, my laptop seems OK now. I have used it for almost 5 hours without
any problems...

Thanks a lot.
Albert said:
Codecs abtained from many web sites are riddled with spyware
When a sys is infected you should turn off sys restore, as should you use it
the infection will be reinstalled.
Only turn on when you are sure your sys is clean
See below, from an earlier post
--------------------------------------
If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to
JRE/JSE
Version 5.0. There are vulnerabilities in them and they are actively being
exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of
Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE/JSE Version 5.0
Update 7
be installed ASAP.

Simple check, look under...
C:\Program Files\Java

The only folder under that folder should be the latest version...

C:\Program Files\Java\jre1.5.0_07


http://www.java.com/en/download/manual.jsp



For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/
http://www.lavasoft.de/ms/index.htm

* SpyBot Search and Destroy v1.4
http://security.kolla.de/
http://www.safer-networking.org/microsoft.en.html

* SuperAntiSpyware
http://www.superantispyware.com/superantispywarefreevspro.html

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in
Normal Mode.
This way all the components can be downloaded from each AV vendor's web
site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.

You can choose to go to each menu item and just download the needed files or
you can
download the files and perform a scan in Normal Mode. Once you have
downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to
run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal
Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


albertleng said:
Dear all,

I've been bothered by this for few days and i cant carry on with my
work now due to this. I'm extremely annoyed. please help.

It all started by i downloaded an intcodec from a website. Then,
everytime i opened my browser, a page something like
"www.securitypage.com" popped out asking me to clear some
viruses/malware. Then, i downloaded ewigo anti-spyware and SmitfraudFix
(by S!Ri). I followed the instrcutions and somehow successfully removed
the spyware using ewigo and Smitfraudix.

Now, one more thing happened which i think should be related to the
intcodec spyware. Everytime i log on to my Windows (XP SP2), it seems
like "----------------" is being pressed automatically. The
"--------------" will appear whenever there's a cursor on my IE, Excel,
VB6, word and basically all applications which can accept keyboard
typing. This symptom is really annoying that i cant even do anything
for my work now. I tried top restore my system to the earlier system
point but the System Restore didnt work and even make the symptom more
severe.

Can a kind soul out that do me a favour by showing me way to solve
this?

THANK YOU VERY VERY MUCH!

Albert Leng
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top