Some Help - I'm Crazy ~ msp.cpl and Suslix

[Scum]

Thanks~

I Got This=
[image: http://img121.imageshack.us/img121/5131/trojin3qg.jpg]

Then This=
[image: http://img522.imageshack.us/img522/3157/trojino5aj.jpg]

I Rebooted in Safe mode to Delete (Stupidly) it but Couldn't Find it,
Now every 5 Minutes I get this=
[image: http://img522.imageshack.us/img522/892/yacoont0038fa.jpg]
[image: http://img522.imageshack.us/img522/2673/yacoont0029fo.jpg]
Somthing about msp.cpl

And My Scanners not picking it up now, When I Restarted the thing must
have closed and started the stuff

Thanks Again.
And Yes I know I'm Lazy and asking for alot

 

[David H. Lipman]

From: "Scum" <[email protected]>

| Thanks~
|
| I Got This=
| [image: http://img121.imageshack.us/img121/5131/trojin3qg.jpg]
|
| Then This=
| [image: http://img522.imageshack.us/img522/3157/trojino5aj.jpg]
|
| I Rebooted in Safe mode to Delete (Stupidly) it but Couldn't Find it,
| Now every 5 Minutes I get this=
| [image: http://img522.imageshack.us/img522/892/yacoont0038fa.jpg]
| [image: http://img522.imageshack.us/img522/2673/yacoont0029fo.jpg]
| Somthing about msp.cpl
|
| And My Scanners not picking it up now, When I Restarted the thing musthave closed and
| started the stuff
|
| Thanks Again.
| And Yes I know I'm Lazy and asking for alot-- Scum

Download Haxdoor.exe from the URL --
http://www.ik-cs.com/programs/virtools/Haxdoor.exe

Execute; Haxdoor.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
It is suggested that you move the report out of c:\mcafee before performing another scan.

 

[David H. Lipman]

From: "Scum" <[email protected]>

| Nah It Didn't Really work;
|
| I Keep Getting 'Explorer needs to close' and the file names msp.cpl-- Scum

Download HiJack This!
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a log file and post in one of the below forums...

Forums where you can get expert advice for HiJack This! (HJT) logs.
NOTE: Registration is REQUIRED before posting a log
NOTE: Web sites NOT listed in any particular order

http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/security
http://castlecops.com/forum67.html
http://www.wilderssecurity.com/forumdisplay.php?f=24
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.iamnotageek.com/f-130.html
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://boards.cexx.org/viewforum.php?f=1
http://www.malwarebytes.biz/forums/index.php?showforum=5

{ borrowed from the alt.privacy.spyware News Group }

 

[Scum]

Nah It Didn't Really work;

I Keep Getting 'Explorer needs to close' and the file names msp.cp

 

[David H. Lipman]

From: "Scum" <[email protected]>

| Nah It Didn't Really work;
|
| I Keep Getting 'Explorer needs to close' and the file names msp.cpl-- Scum

Please submit a sample of "msp.cpl" or "msc.cpl" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against 18 different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

When you get the report, please post back the exact results.

 

[Scum]

I Don't think it works,
This happens.

http://img181.imageshack.us/img181/7425/445454pu.jp

 

[David H. Lipman]

From: "Scum" <[email protected]>

| I Don't think it works,
| This happens.
|
| http://img181.imageshack.us/img181/7425/445454pu.jpg -- Scum

It's working properly !

Please let it continue till the end.

 

[David H. Lipman]

From: "Scum" <[email protected]>

|
| Ok It seems a bit Dodgy in my mind.
|
| When I Close it the computer beeps really Unique like and hurts my ears-- Scum


You can't scan files when the OS is keeping the respective File Handles open.

What do you mean "you close it" ?

The *only* way to properly close the utility is through the menu.

Did you let the McAfee scan through completion ?
If so, please copy and paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML
in your reply.

 

[Scum]

From: "Scum" (e-mail address removed)

| I Don't think it works,
| This happens.
|
| http://img181.imageshack.us/img181/7425/445454pu.jpg -- Scum

It's working properly !

Please let it continue till the end.

Ok It seems a bit Dodgy in my mind.


When I Close it the computer beeps really Unique like and hurts my ears

 

[David H. Lipman]

From: "Scum" <[email protected]>

| It's Gone now, Click for Dancing Banana
|
| http://img407.imageshack.us/img407/16/banana6na9rb0lb.gif -- Scum

Ok. Was it my tool ?

Did you let the McAfee scan through completion ?
If so, please copy and paste the contents of the HTML Log file; C:\mcafee\ScanReport.HTML
in your reply.

 

[Scum]

It's Gone now, Click for Dancing Banana

http://img407.imageshack.us/img407/16/banana6na9rb0lb.gif

 

[Scum]

From: "Scum" (e-mail address removed)

| It's Gone now, Click for Dancing Banana
|
| http://img407.imageshack.us/img407/16/banana6na9rb0lb.gif -- Scum

Ok. Was it my tool ?

Did you let the McAfee scan through completion ?
If so, please copy and paste the contents of the HTML Log file;
C:\mcafee\ScanReport.HTML
in your reply.

nah a guy from My home page's forum helped solve it.

I removed it from Quarantine;
Removed the sh*t from Hijack this then rebooted

 

[Scum]

Now I'm gonna Help a guy from my Clubs Message Board Though his Sh*

 

[David H. Lipman]

From: "Scum" <[email protected]>

|
| nah a guy from My home page's forum helped solve it.
|
| I removed it from Quarantine;
| Removed the sh*t from Hijack this then rebooted-- Scum

Could you please provide me that information so I can update my tool.

I would greatly appreciate it.

Either post it or email me.
Just remove ~nospam~ [email protected]