InvestorsHub Logo

gtober

10/20/04 1:50 PM

#312289 RE: Cincy Trader #312287

Try coolwebshredder.exe which I found from Bruce's board. May not work, but worth a try.

http://www.investorshub.com/boards/read_msg.asp?message_id=3073013

KaliCo

10/20/04 2:00 PM

#312291 RE: Cincy Trader #312287

Bargin Buddy removal.

It returns as it has loaded a file somewhere on the HD acting like a trojan horse to reload it with every reboot, and you have to remove the registry entry.

Try a google search for removal, and if you use regedit for removal be very careful to clear infection related entries ONLY.


Antivirus should get it too. HD reformat is way overkill imho.

fix procedure from google search :

http://home.comcast.net/~george.roberts4/bargainbuddy.htm





Newly2b

10/20/04 2:02 PM

#312294 RE: Cincy Trader #312287

OT

BTW, if you shop online, be careful about a company called ReservationRewards. I found a small charge from them on my CC, a membership fee. I called and they said they'd issue a credit and cancel me, but I had, in fact, signed up for their service by filling in their promo form at PrintPal (where I buy my printer ink). No, didn't happen -- I pull out my last PrintPal order (which I always print a copy of just before sending), and there is the promo, but not filled in. Hmmmmm.

Talking to a friend later, I mentioned it, and she flipped. They had gotten her, too, and she never found out where they got her CC number from. They told her 3 times they would credit her and cancel the membership, and continued to charge her, plus an $1100 charge for a ticket she never bought. Ended up her CC company reported them to the Attorney General or someone, and they already had a big file on that company.

I immediately cancelled that credit card, and put in a dispute about the charge. Also alerted PrintPal, who gave ReservationsRewards my CC number (I'll never do business with them again!). We'll see if I ever get the credit.

Newly

zztops

10/20/04 2:04 PM

#312296 RE: Cincy Trader #312287

OT. Cincy, if you don't want to re-format hard drive like I did (my 'puter was new and lean and mean) then your next bet is to contact Bruce at the Dream Machine board here on I-hub. Scan all posts for those malware names. They are going to direct you to a program called "hijackthis" that will help you a great deal. Be sure to get the experts to help you run that program-don't go into your registry by yourself with "hijackthis" program and start removing stuff unless you get those techs to help you

isla

10/20/04 2:56 PM

#312320 RE: Cincy Trader #312287

cincy trader,

I know what your going through, I picked up 5 trojans on this
site 2 weeks ago. I ran all the programs you mentioned,
none of them worked. What i did was go into system files and
removed them 1 by 1. the icon is a cd infront of a computer
and on the computer screen is a horse. once you recognize
the icon its easy to do, just delete, good luck.

Bruce A Thompson

10/20/04 3:06 PM

#312327 RE: Cincy Trader #312287

CT

Adaware should have gotten it.

Update your Adaware files then run it again.

Then dump your restore points.

BT