Virtual Bouncer? Spyware?

[Guest]

I have had problems with spyware for the last week. I've tried everything I know. I've been scanning with 3 different spyblockers everytime I log on. Today, it's finding something that it says it can't delete. Virtual Bouncer? Any suggestions? Thanks!

 

[Wesley Vogel]

Jeez, you certainly have a piece of mung here.

Virtual Bouncer
[[Official Description: Claims to be an adware remover.
Comment: It drive-by installs, phones home after install, gives itself the
right (in the EULA) to download and install software from its servers, and
you have to *pay them* for a "subscription" with a credit card to have it
removed, then opt out of having the "subscription" automatically renewed.

Because you must pay to have to removed, some have dubbed this "extorion
ware".

Manual removal: Can sometimes be removed by using Add/Remove programs from
the control panel.

Otherwise, an uninstaller is available at:

http://www.spywarelabs.com/VirtualBouncerUninstall.exe ]]

Virtual Bouncer - Adware removal instructions
http://www.kephyr.com/spywarescanner/library/virtualbouncer/index.phtml

==============

First. Make sure of these settings and nothing will install without you
answering YES. (Except what may install as part of some other software.)

Start | Settings | Control Panel | Internet Options | Advanced tab |
Make sure both of these are NOT checked.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]

 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
particular task.]]

Apply | OK
=================================

Second. If you need a scan right now.

Follow the instructions!
THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.php

======================

Third.
It is known as Scumware. Visit these sites. 1, 2, 3 and 4 are really good.
Download, install, run, update and run again; one or all. They are all
good, FREE utilities.

1) CWShredder direct download:
http://216.180.233.163/~merijn/files/CWShredder.exe

2) SpywareBlaster
[[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
ever being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.]]
http://www.javacoolsoftware.com/spywareblaster.html

3) Spybot S & D
http://www.safer-networking.org/index.php?lang=en&page=download

4) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/downloads.html

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html?source=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) AdAware
http://www.lavasoft.de/support/download/
===============

Additional information & instructions.
A wealth of information here, boys and girls.

THE PARASITE FIGHT QUICK FIX PROTOCOL
http://aumha.org/a/quickfix.htm

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Bugs, Glitches & Stuffups
http://www.mvps.org/inetexplorer/Darnit.htm

Dealing with Unwanted Spyware and Parasites
http://mvps.org/winhelp2002/unwanted.htm

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315#appliesto

Spyware and Deceptive Software
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx?gssnb=1

What you should know about spyware
http://www.microsoft.com/security/articles/spyware.asp

 

[Guest]

ok, I've done everything that was suggested. One of the boxes was checked and I unchecked it. I've installed and ran everything twice and rebooted, but it's still doing it. I just can't seem to get to the core of this spyware and get it removed. Thanks!

 

[Guest]

In the last 3 days Ad-aware has removed 801 objects. That just seems rediculous.

 

[Guest]

mmmm I would check the reply from Wesley Vogel again. It is seems virtually
impossible to do everything he suggested (twice) in a 1/2 hour. Did you
run the programs in Safe Mode? Did you turn OFF System Restore?

ok, I've done everything that was suggested. One of the boxes was checked

and I unchecked it. I've installed and ran everything twice and rebooted,
but it's still doing it. I just can't seem to get to the core of this
spyware and get it removed. Thanks!everything I know. I've been scanning with 3 different spyblockers everytime
I log on. Today, it's finding something that it says it can't delete.
Virtual Bouncer? Any suggestions? Thanks!

 

[Wesley Vogel]

Sue,

I have no idea what boxes you are referring to.

From >>
http://www.kephyr.com/spywarescanner/library/virtualbouncer/index.phtml

Manual removal
[[Please follow the instructions below if you would like to remove Virtual
Bouncer manually. Please notice that you must follow the instructions very
carefully and delete everything that is mentioned. In most cases the removal
will fail if one single item is not deleted. If Virtual Bouncer remains on
your system after stepping through the removal instructions, please
double-check by stepping through them again.

1 Start the registry editor. This is done by clicking Start then Run. (The
Run dialog will appear.) Type regedit and click OK. (The registry editor
will open.)

2 Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'

3 In the right pane, delete the value called 'VBouncerDL', if it exists.

4 Exit the registry editor.

5 Restart your computer.

6 Start Windows Explorer and delete:
%ProgramsDir%\VBouncer\
Note: %ProgramsDir% is a variable (?). By default, this is C:\Program
les. ]]

Problems uninstalling? Here's some advice.
http://www.kephyr.com/spywarescanner/uninstallproblems.phtml

 

[Guest]

It was possible to do in 1/2 hour because the spyware blockers that he listed were already installed on my computer. I've been working on this for over a week so I've already gotten the spyblockers downloaded and scanned them. All I had to do what re-scan. The only thing I haven't done yet is run them in safe mode. I wasn't aware until the post that I should have been doing that. Thanks

 

[Wesley Vogel]

Seemed *real* efficient to me also. ;-)

 

[Guest]

I was referring to the "enable install on demand" boxes that you said to be sure weren't checked. One of them was infact checked.

Sue,

I have no idea what boxes you are referring to.

From >>
http://www.kephyr.com/spywarescanner/library/virtualbouncer/index.phtml

Manual removal
[[Please follow the instructions below if you would like to remove Virtual
Bouncer manually. Please notice that you must follow the instructions very
carefully and delete everything that is mentioned. In most cases the removal
will fail if one single item is not deleted. If Virtual Bouncer remains on
your system after stepping through the removal instructions, please
double-check by stepping through them again.

1 Start the registry editor. This is done by clicking Start then Run. (The
Run dialog will appear.) Type regedit and click OK. (The registry editor
will open.)

2 Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'

3 In the right pane, delete the value called 'VBouncerDL', if it exists.

4 Exit the registry editor.

5 Restart your computer.

6 Start Windows Explorer and delete:
%ProgramsDir%\VBouncer\
Note: %ProgramsDir% is a variable (?). By default, this is C:\Program
les. ]]

Problems uninstalling? Here's some advice.
http://www.kephyr.com/spywarescanner/uninstallproblems.phtml


--
Hope this helps. Let us know.
Wes

In

ok, I've done everything that was suggested. One of the boxes was
checked and I unchecked it. I've installed and ran everything twice
and rebooted, but it's still doing it. I just can't seem to get to
the core of this spyware and get it removed. Thanks!

 

[Guest]

For everyone's information the reason I was able to do it so quickly was because I already have the spyblockers that you've suggested installed on my computer. So it only took me a 1/2 hour to rerun them. Thanks!

 

[Guest]

Oh ok when you said installed - I though you had to install them. - I assume
they were updated before you scanned, and you did not have any luck in safe
mode. You may want to post a hijack log at one of the forums since you have
tried everything else with no luck. Hopefully the experts there can help
you.

Hijack This - http://209.133.47.200/~merijn/files/HijackThis.exe
OR
Hijack This - http://tomcoyote.com/hjt
OR
http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder

FORUMS
http://forums.tomcoyote.org/
http://forums.net-integration.net/index.php
http://computercops.biz/forums.html
http://forums.spywareinfo.com/
http://boards.cexx.org/
http://www.techsupportforums.com/
http://forums.techguy.org/

For everyone's information the reason I was able to do it so quickly was

because I already have the spyblockers that you've suggested installed on my
computer. So it only took me a 1/2 hour to rerun them. Thanks!

 

[Wesley Vogel]

*Now* I understand.

If these boxes are checked, you get things installed without your even being
aware of it. This is called a driveby. As in drive by shooting. Only the
scumware mafia uses different weapons than the gangbangers use. No less
lethal as you may have seen.

 Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]

 Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
particular task.]]

Where are you at with your scumware removal problem??

--
Hope this helps. Let us know.
Wes

In

I was referring to the "enable install on demand" boxes that you said
to be sure weren't checked. One of them was infact checked.

Sue,

I have no idea what boxes you are referring to.

From >>
http://www.kephyr.com/spywarescanner/library/virtualbouncer/index.phtml

Manual removal
[[Please follow the instructions below if you would like to remove
Virtual Bouncer manually. Please notice that you must follow the
instructions very carefully and delete everything that is mentioned.
In most cases the removal will fail if one single item is not
deleted. If Virtual Bouncer remains on your system after stepping
through the removal instructions, please double-check by stepping
through them again.

1 Start the registry editor. This is done by clicking Start then
Run. (The Run dialog will appear.) Type regedit and click OK. (The
registry editor will open.)

2 Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \
CurrentVersion \ Run'

3 In the right pane, delete the value called 'VBouncerDL', if it
exists.

4 Exit the registry editor.

5 Restart your computer.

6 Start Windows Explorer and delete:
%ProgramsDir%\VBouncer\
Note: %ProgramsDir% is a variable (?). By default, this is C:\Program
les. ]]

Problems uninstalling? Here's some advice.
http://www.kephyr.com/spywarescanner/uninstallproblems.phtml


--
Hope this helps. Let us know.
Wes

In

ok, I've done everything that was suggested. One of the boxes was
checked and I unchecked it. I've installed and ran everything twice
and rebooted, but it's still doing it. I just can't seem to get to
the core of this spyware and get it removed. Thanks!

:

I have had problems with spyware for the last week. I've tried
everything I know. I've been scanning with 3 different spyblockers
everytime I log on. Today, it's finding something that it says it
can't delete. Virtual Bouncer? Any suggestions? Thanks!

 

[Bruce Chambers]

Greetings --

Virtual Bouncer is spyware that claims to be just the opposite.

To deal with issues caused by any sort of "adware" and/or
"spyware,"such as Gator, Comet Cursors, Smiley Central, Xupiter,
Bonzai Buddy, or KaZaA, and their remnants, that you've deliberately
(but without understanding the consequences) installed, two products
that are quite effective (at finding and removing this type of
scumware) are Ad-Aware from www.lavasoft.de and SpyBot Search &
Destroy from www.safer-networking.org/. Both have free versions.
It's even possible to use SpyBot Search & Destroy to "immunize" your
system against most future intrusions. I use both and generally
perform manual scans every week or so to clean out cookies, etc.

Additionally, manual removal instructions for the most common
varieties of scumware are available here:

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

I have had problems with spyware for the last week. I've tried

everything I know. I've been scanning with 3 different spyblockers
everytime I log on. Today, it's finding something that it says it
can't delete. Virtual Bouncer? Any suggestions? Thanks!

 

[Guest]

Jeez, you certainly have a piece of mung here.

Wesley,

Just wanted to post a big THANK YOU! This particular scumware (fitting name) was causing my small company some serious problems! Your advice worked perfectly and our system is once again clean. Thanks again!