Moviepass.tv 3 day free trial

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by stumpjumper2, Apr 1, 2006.

  1. stumpjumper2

    stumpjumper2 Private E-2

    Somebody in the house got us into Moviepass and we endlessly have the reminder. I've done all the suggested "Run me first" activities but the reminder still comes up.
    Attached are my HJT, about buster and Panda Active Scan logs. Help!!!!

    Stumpjumper2
     

    Attached Files:

  2. stumpjumper2

    stumpjumper2 Private E-2

    Added Bitdefender info
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Let's get an installed programs list from HijackThis too!
    • Run HijackThis, click Open the Misc Tools section
    • Click Open Uninstall Manager
    • Click Save List (generates uninstall_list.txt)
    • Click Save, to save it to a file where you can find it.
    • Attach the uninstall_list.txt file to your next message.
     
  4. stumpjumper2

    stumpjumper2 Private E-2

    Here is the uninstall list

    Stumpjumper2
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Looks like you did not do step 0 of the READ ME and also you did not check for updates to your programs.

    Spybot - Search & Destroy 1.4 RC2b <--- this is an older version!

    And the below show be uninstalled as per step 0 of the READ & RUN ME. The first item is MoviePass
    Notification Utility
    Viewpoint Manager (Remove Only)
    Viewpoint Media Player
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    After uninstalling those programs, you just need to do a little cleaning. Delete the below if found.
    C:\WINDOWS\SYSTEM32\Agent.dll
    C:\PROGRAM FILES\ql <--- delete the folder or file
    C:\Program Files\Notify <--- delete the whole folder
    C:\Program Files\Viewpoint <--- delete the whole folder

    Additional step to delete SbCIe02a.dll :
    - Click Start, Run, and enter cmd in the box and click OK. This opens a command prompt windows.
    - Enter the following command lines each followed by the enter key
    cd C:\WINDOWS\Downloaded Program Files\
    attrib -r -h -s SbCIe02a.dll
    del SbCIe02a.dll
    exit
     
  7. stumpjumper2

    stumpjumper2 Private E-2

    Your right, though I looked at step O I was looking for something else at the time and missed
    Notification Utility
    Viewpoint Manager (Remove Only)
    Viewpoint Media Player

    I've removed those and
    C:\WINDOWS\SYSTEM32\Agent.dll
    C:\PROGRAM FILES\ql

    When I ran
    cd C:\WINDOWS\Downloaded Program Files\
    attrib -r -h -s SbCIe02a.dll

    I got the reply file not found
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did the command line prompt change to show the below which would mean that you were in the

    C:\WINDOWS\Downloaded Program Files>

    folder before you did the attrib command?

    Is the MoviePass problem gone?
     
  9. stumpjumper2

    stumpjumper2 Private E-2

    Yes I was at
    C:\WINDOWS\Downloaded Program Files\

    I still have a MoviePass screen up that I can't get rid of unless I restart. Should I do that.
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Do an the below commands at that prompt:
    attrib -r -s -h *.*
    dir s*.*

    Do you see anything that looks like SbCIe02a.dll

    Yes! Reboot and tell me where things stand!
     
  11. stumpjumper2

    stumpjumper2 Private E-2

    I cleaned out the recycle bin again and rebooted. I kept getting Spybot Search and Destroy messages telling me that values had been deleted for Notification Utility, View Mgr, MS Config, and First Home page. It did this even though I rebooted several times. I deleted Spypot Search & Destroy and installed the latest version. It removed something called Windows Center Antivirus Disable Notify. I rebooted for about the fourth time and now I seem to be OK.
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    The reason you were having messages from Spybot (besides the fact that it was old) is that you had Teatimer running (something we ask not to have running in the READ & RUN ME). It makes cleanups difficult and often times causes many users PCs to slow down too much.

    If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

    After that, you should work thru the below link:

    How to Protect yourself from malware!
     
  13. stumpjumper2

    stumpjumper2 Private E-2

    Thanks ! Everything now seems to be OK. Teatimer is gone with my install of the latest Spybot and I am doing the suggested malware prevention steps.
     
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds