Cannot get rid of SEX dialer, tryed ad aware and spybot...

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Miamistyle, Aug 15, 2004.

  1. Miamistyle

    Miamistyle Private E-2

    I cannot get rid of this thing ad-aware and spybot search and destroy finds it and cleans it off
     
    Miamistyle, Aug 15, 2004
    #1
  2. Miamistyle

    Miamistyle Private E-2

    Sorry for the partial explanation on the previous thread but the "Sex Dialer " always knocks me offline.
    I have tryed ad-aware and Spybot search and destroy and neither canget rid of it.

    Anyone have any suggestions??
     
    Miamistyle, Aug 15, 2004
    #2
  3. bobb39

    bobb39 Private E-2

    Had the same problem myself and finally got rid of it by either using fix-it or Spysweeper by webroot, not sure which one got rid of it. Before I got rid of it, it cost me $600 by dialing without my knowledge and the Telephone company wouldn't dismiss the charges because they said it came from my computer. I bought Xoftspy after hearing so many people brag about it but I can run Xoftspy and it might find one or two spy or adware. I can run spysweeper after running Xoftspy and it will find two or three spy or adware that Xoftsyp never seen. The fix-it program won't delete a lot of viruses but it tells where they are located and I can go in and take them out manually.
     
    bobb39, Aug 15, 2004
    #3
  4. Love2000AMGlam

    Love2000AMGlam Private E-2

    Hi, I have the same problem. The main file was sexdialer.exe . I figured out when I got the virus and deleted the files from that time period, but now everytime I try to open My Computer, or any other folder my computer freezes.
    I'm running Windows 98, and don't have a virus protection program.
     
    Love2000AMGlam, Aug 17, 2004
    #4
  5. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Probably need to check add\remove programs and run from safe mode OR stop the sexdialer.exe by hitting ctrl alt and delete to stop the process. Follow this thread:

    http://forums.majorgeeks.com/showthread.php?t=35407

    Oh, and not going to porn sites would help a lot too.
     
    Major Attitude, Aug 17, 2004
    #5
  6. Love2000AMGlam

    Love2000AMGlam Private E-2

    I already deleted the sexdialer.exe, but doing so seems to have messed up Explorer.

    And I don't go to porn sites. Never.
     
    Love2000AMGlam, Aug 17, 2004
    #6
  7. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Guess what. Someone did. Sexdialer is something I can easily find on one of my friends pcs who goes to porn sites. Its pretty hard to get without a porn site, though a virus from file sharing or cracks, etc., could be the cause.

    Tell me how IE is "messed up". Thats not much to go on. Please try the spyware removal tutorial as well:

    http://forums.majorgeeks.com/showthread.php?t=35407
     
    Major Attitude, Aug 17, 2004
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Love2000,

    I think we should avoid hijacking Miamistyle's thread. You should begin a thread for the problems you are having. It is okay to try to help when you have similar symptoms (which you do) but you are side tracking people to your issues now.
     
    Last edited: Aug 18, 2004
    chaslang, Aug 18, 2004
    #8
  9. Miamistyle

    Miamistyle Private E-2

    Sorry I have not been able to respond to the thread I started. Seems as if it got kind of busy . Anyway I am still having that problem. Here is the log from Spybot Search and Destroy:

    VBouncer: Temporary file (File, nothing done)
    C:\WINNT\TEMP\GLFBD2.tmp

    DSO Exploit: Data source object exploit (Registry change, nothing done)
    HKEY_USERS\S-1-5-21-343818398-1343024091-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3

    TIBS: Program directory (Directory, nothing done)
    C:\Program Files\WebSiteViewer\

    TIBS: User settings (Registry key, nothing done)
    HKEY_USERS\S-1-5-21-343818398-1343024091-839522115-500\Software\WebSiteViewer


    And.....
    VBouncer: Temporary file (File, nothing done)

    C:\WINNT\TEMP\GLFBD2.tmp

    DSO Exploit: Data source object exploit (Registry change, nothing done)

    HKEY_USERS\S-1-5-21-343818398-1343024091-839522115-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1004!=W=3


    Any help would be appreciated.

    Thanks.
     
    Miamistyle, Aug 18, 2004
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to run the rest of the items in the link Major Attitude gave you and give us results on them too. Definitely you need to run CCleaner which is given there.

    I would also recommend running Ccleaner, Ad-aware, SpyBot, and CWSshredder after booting to safe mode: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

    Did you go to Windows Update and get all the Critical Updates for your OS? If yes, ignore the SpyBot DSO Exploit because it is a bug with SpyBot that we have discussed at least a million times.

    After doing ALL of that, if still having a problem see the thread about HijackThis logs and post me a log (as an attachment): http://forums.majorgeeks.com/showthread.php?t=38752
     
    chaslang, Aug 18, 2004
    #10
  11. sweetdreamer

    sweetdreamer Private E-2

    whoa are you serious? the phone company charged you $600? how often did your dialer run? I have TIBS dialer on my computer and i have tried spybot, Ad-Aware Se, Spyware blaster, and spyware doctor which seems to be the crappiest thing ever. i can't believe i paid for it. well anyway, can anyone help me to remove it? thanks
     
    sweetdreamer, Feb 18, 2005
    #11
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


    Please start your own new thread for your problem! But before you post, you must first run all the steps in READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you run those steps and indicate that you have run them or you will just be told to run them again.
     
    chaslang, Feb 18, 2005
    #12

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds