uninstall bonzi crap

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by fasterboy, Aug 31, 2003.

  1. fasterboy

    fasterboy Private E-2

    Hi all.

    I was fooled into installing some sofware from Bonzi called Intruder Alert 98. I didnt know it was from this source at the time, and being the recomendation came from a family member (sigh) I happily went along and installed it. Now I learn that its more bonzi rubbish and does completely the opposite to blocking my ports! Hence, I want to be rid of it...

    Im running XP home. There is no uninstaller (Of course!!) and nothing in the add/remove progs. There is however an install log, and im sure with a little help from some knowledgable chaps like those that visit here I can delete the appropriate files and edit the registry to get rid of this. Im not a pro user, but I am careful and methodical, (spelcheck) and not completely PC illiterate so how possible is this? It looks pretty straight foward even to me as the log is resonably clear, though im a little uncertain about the wording in some parts with the sys32 files. There seems to be only a couple of reg enties though.
    I think OLEAUT32.DLL is a valid winows file? DWSPY32.DLL is nasty?.. I dont know... Please help.

    Thanks Paul


    Ok so heres the log:


    *** Installation Started 07/12/02 21:39 ***
    Title: Intruder Alert 98, Version 1.0 Installation
    Source: D:\SOFTWARE\ANTI#C#B\IASETUP.EXE
    File Copy: C:\Program Files\Intruder Alert 98\IA98.exe
    File Copy: C:\Program Files\Intruder Alert 98\Iaalarm.wav
    File Copy: C:\Program Files\Intruder Alert 98\license.txt
    File Copy: C:\Program Files\Intruder Alert 98\support.txt
    File Copy: C:\Program Files\Intruder Alert 98\Csaud32.ocx
    File Copy: C:\Program Files\Intruder Alert 98\Csaudl32.dll
    File Copy: C:\Program Files\Intruder Alert 98\Cswsk32.ocx
    File Copy: C:\Program Files\Intruder Alert 98\Dwsbc32.ocx
    File Copy: C:\Program Files\Intruder Alert 98\Dwspy32.dll
    File Copy: C:\Program Files\Intruder Alert 98\mfc42.dll
    File Copy: C:\Program Files\Intruder Alert 98\msvcrt.dll
    File Copy: C:\Program Files\Intruder Alert 98\Oleaut32.dll
    File Copy: C:\Program Files\Intruder Alert 98\olepro32.dll
    File Copy: C:\Program Files\Intruder Alert 98\MSVBVM50.DLL
    Version: Following file not copied.
    Shared DLL counter ignored:
    File Copy: C:\WINDOWS\System32\mfc42.dll
    Shared DLL counter ignored:
    File Copy: C:\WINDOWS\System32\msvcrt.dll
    Version: Following file not copied.
    Shared DLL counter ignored:
    File Copy: C:\WINDOWS\System32\olepro32.dll
    Shared DLL counter ignored:
    File Copy: C:\WINDOWS\System32\OLEAUT32.DLL
    File Copy: C:\WINDOWS\System32\CSAUDL32.DLL
    File Copy: C:\WINDOWS\System32\DWSPY32.DLL
    Version: Following file not copied.
    Shared DLL counter ignored:
    File Copy: C:\WINDOWS\System32\MSVBVM50.DLL
    File Copy: C:\WINDOWS\System32\CSAUD32.OCX
    File Copy: C:\WINDOWS\System32\CSWSK32.OCX
    File Copy: C:\WINDOWS\System32\DWSBC32.OCX
    File Copy: C:\WINDOWS\IAALARM.WAV
    RegDB Key: software\microsoft\windows\currentversion\run
    RegDB Val: C:\Program Files\Intruder Alert 98\ia98.exe
    RegDB Name: IntruderAlert
    RegDB Root: 2
    Icon Group: Intruder Alert 98
    Icon Name: Intruder Alert 98
    Icon Cmd: C:\PROGRA~1\INTRUD~1\ia98.EXE
    Icon Group: Intruder Alert 98
    Icon Name: Technical Support
    Icon Cmd: C:\PROGRA~1\INTRUD~1\support.txt
    Icon Group: Intruder Alert 98
    Icon Name: License Agreement
    Icon Cmd: C:\PROGRA~1\INTRUD~1\license.txt
     
  2. da chicken

    da chicken MajorGeek

    I'm willing to be Ad-Aware or Spybot Search & Destroy will locate and eliminate the offending elements of this program. Bonzi is a known malware producer. Have you tried those?
     
  3. fasterboy

    fasterboy Private E-2

    tried em

    I have both of those progs and have run 'em many times. Maybe they picked up something the first time I did it, but ive just searched out the files listed in the log and there still there.
     
  4. Brian C

    Brian C Private Peanut Gallery

    Did you try System Restore, to a date before you installed the crap program?
     
  5. fasterboy

    fasterboy Private E-2

    No it was a long time ago. Many programe installs since!

    Its not even the current version of their software.
     
  6. Brian C

    Brian C Private Peanut Gallery

  7. fasterboy

    fasterboy Private E-2

    Thanks. Its not bonzibuddy that I have, and there is no uninstaller with this one...
    Cheers anyways!
     
  8. S0mE0nEsMiNd

    S0mE0nEsMiNd Private E-2

    bonzi buddy=spyware
     
  9. fasterboy

    fasterboy Private E-2

    Thank you, yes, its nasty rubbish.
    So no one can help me manually uninstall this prog?
     
  10. augiedoggie

    augiedoggie The Canadian Loon - LocoAugie (R.I.P. 2012)

    I'm amazed that neither Adaware, Spybot or PChell didn't help you. New variant.:confused:
     
  11. fasterboy

    fasterboy Private E-2

    Well, I dont think so, at least. Im using ad-aware 6, the latest vers, and as I said before the version I have of Internet Alert is 98, a very old and outdated copy. (Most likely developed in 1998?)
    Havent tried PChell. But ad-aware would work, one would think. Ive stopped IA98 loading in msconfig at startup, but I just want it "out damn spot".
     
  12. Thunder

    Thunder Private E-2

    Delete the C:\Program Files\Intruder Alert folder.
    Delete the reg entrys for Intruder Alert.
    Most all the files in WINDOWS\System32 are just VB and are harmless and may be needed by other programs.
     
  13. fasterboy

    fasterboy Private E-2

    Thank you! This is more what im looking for.
    One file in sys32 is called DWSPY32.DLL, and is made by Desaware. "DWSPY32 SpyWorks subclassing engine DLL" Sounds pretty dodgy doesnt it? Delete this fella?
     
  14. Thunder

    Thunder Private E-2

  15. fasterboy

    fasterboy Private E-2

    haha ok.
    Well they werent very crareful when they named it were they?

    Thnx Thunder
     
  16. waxace

    waxace Private E-2

    Just for the hell of it, run these tools to help...

    Download and run:

    1. CW SHREDDER:
    http://www.softpedia.com/public/scripts/downloadhero/10-17-150/

    (This is the one that might take away some of the crap)

    2. RAPID BLASTER KILLER : http://www.wilderssecurity.net/specialinfo/rapidblaster.html#removal

    3. SMART KILLER Mini-Removal tool : http://www.majorgeeks.com/download4113.html

    4. SPYBOT SEARCH AND DESTROY : http://www.safer-networking.org/index.php?page=download

    5. AD-AWARE : http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button


    This WILL Help....
    WAXACE
     
  17. da chicken

    da chicken MajorGeek

    Er, this thread is six months old. Why ressurrect it?
     
  18. waxace

    waxace Private E-2

    Sometimes we have brain farts......


    Today I had one with not looking at the dates....

    Still good advice..

    WAX
     
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Most are available right here on MG's:

    CWShredder: http://www.majorgeeks.com/download4086.html
    SpotBot S&D: http://www.majorgeeks.com/download2471.html
    Ad-Aware: http://www.majorgeeks.com/download506.html
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds