Experience using MS Spyware

[Eric V]

Not having a good experience here...

1. I go to submit a report through the Reporting Tool. As
soon as I hit <enter> on the first line of the description
it immediately starts sending the message. I'm not given
a chance to finish writing the report ?!?

As soon as it submits it says:
"An error occurred submitting the scan results. Please
check you Internet proxy settings and try again."

I don't have any proxy settings configured, this is a home
machine. I select to Reset Web Settings. Still same
thing. My fire wall is not on, despite turning it on
several times.

2. OK, now onto my real problem. Every time I log on my
system automatically pops up a web site for some
advertisement. As I go around, pop up ads appear and
attempts are made to change the search URL.

It keeps trying to run the following binaries:
c:\winpro\system32\xiidb.dll
c:\winpro\cnrkp.dll
size 66,560.

If I open too many explorer windows, my system locks up
and takes *LONG TIME* to respond to any input.

3. I suspect an anti-spyware company has installed this ad
ware since it's conveniently directing me to web sites
like:
http://www.spywarebegone.com/blowsearch/index.html

4. I go to uninstall programs I never installed. One of
them, "Shopping Wizard" directs me to a URL:
http://looking-for.cc/uninstall/ShoppingWizard.html

They want me to *DOWNLOAD* and RUN a program just to
uninstall it from my system? This makes no sense, I
didn't install this program and I'm definitely not going
to run an app from an untrusted site to uninstall it. I
want it off my machine, why is there no "hard remove"
option? How do I do this?

MS Antispyware currently does not report *anything* after
a full scan. I'm sending this before my computer
crashes...

 

[D@annyBoy {Beta ID 4XX961}]

Please submit a suspected spyware report from the infected machine
using Tools from the Menu

Restart in Safe Mode, open Microsoft AntiSpyware, on the scan page choose
scan options > full system scan (check boxes below) > click "Run Scan Now".

 

[Bill Sanderson]

You are hitting on a bug (the report submission issue) for which I don't
have a workaround, and also you appear to have a bug which Microsoft
Antispyware can't deal with (as evidenced by the fact that it doesn't find
it in the first place!)

Please follow D@nnyBoy's excellent advice, but in addition, I recommend that
you get in touch with Ron Kinner, as noted below:
--------------------------------
Get HijackThis.exe from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to C:\hjt (new folder) then Open it and select
Scan and Save Log. Note where you saved the log then
send it to me as an attachment. Put Hijack in the subject
so I'll know it's not spam.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)

 

[D@annyBoy {Beta ID 4XX961}]

the credit[s not mine, but I forgot to give due acknowledgement

(hmmmmm..........................
must remember the next time I copy and paste to include contributor's name)