Help removing malaware and others?

Discussion in 'Malware Help (A Specialist Will Reply)' started by tcc1, Jul 6, 2007.

  1. tcc1

    tcc1 Private E-2

    I am trying to remove some spyware and the software called "Wireless-G USB Netwrok adapter rangerbooster" without success. I have looked for the uninstalled file and tried the add/remove program from the control panel and not getting any results.

    In safe mode I run CCcleaner, and spybot search and destroy.

    I run also counterspy but could not find anything.

    I run bitdefender in safe mode but could not find anything

    I run panda but could not safe the file so I run it in normal mode and safe the file like that.


    Please help
     

    Attached Files:

    tcc1, Jul 6, 2007
    #1
  2. tcc1

    tcc1 Private E-2

    this is the continuation of the files
     

    Attached Files:

    tcc1, Jul 6, 2007
    #2
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Why are you trying to uninstall this anyway? It is part of your wireless network interface software that you or someone else had installed. It is not malware. Why do you think it is malware?

    Run this Getting Uninstall Programs List From The Registry and attach the requested log.
     
    chaslang, Jul 6, 2007
    #3
  4. tcc1

    tcc1 Private E-2

    Thank you for answering my question.

    There is some spyware in the computer that I am not sure what is affecting.

    Also, I installed the wireless software because I bought the rangerbooster, but I do not need it any more, So I want to uninstall the Wireless-G USB Network adapter rangerbooster software. Apparently it may be interfiering with the wireless software by IBM.

    Everytime I take it to the office I had to turn off the internal wireless because it just does not do anything.

    This is an IBM laptop T42.

    So may I ask for your help?
     

    Attached Files:

    tcc1, Jul 6, 2007
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your logs do not show any definite malware problems. I do question one item that I have no complete information on. Do you know what the below is for?

    O20 - AppInit_DLLs: WIKI.DLL

    Does the wiki.dll file even exist on your PC? The normal place this could be would be c:\winnt\system32\wiki.dll or c:\winnt\wiki.dll

    Also who disabled registry editing on this PC? Was it your employer? I refer to the below in your HJT log.
    O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

    You should uninstall the CounterSpy trial since we are finished with it.


    But there are no signs of this software running in your logs. It does show in your uninstall programs list at the end of the newfiles.txt log but this does not really mean the software is still installed. Since I do not see it running, I have to ask how it could be interferring with your built in connection. Was the hardware related to this software uninstalled. At anyrate, this is a Hardware Forum or Networking Forum issue not a malware issue.
     
    chaslang, Jul 6, 2007
    #5
  6. tcc1

    tcc1 Private E-2

    Chaslang:

    Thank you for responding to my question.

    I do not know what the line represents, but I could not find the file wiki.dll anywhere.

    The register editing is possible that my employer disable it because they do not want anybody who does not know what are they doing to edit the registers.

    When you look at the windows control panel for add/remove software the Wireless-G USB Network adapter rangerbooster shows in the list. So how can I remove this from the list?
     
    tcc1, Jul 7, 2007
    #6
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Then let's try to remove it.

    Run HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O20 - AppInit_DLLs: WIKI.DLL

    NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

    After clicking Fix, exit HJT.


    Try using the below to uninstall it. Let me know if it works.

    Your Uninstaller! 2006


    Now reboot your PC and then after reboot attach a new log from HJT.
     
    chaslang, Jul 7, 2007
    #7
  8. tcc1

    tcc1 Private E-2

    I removed WIKI.DLL. No problems.

    I uninstall the Wireless-G. Thanks It worked.

    See attached HJT file. Thanks
     

    Attached Files:

    tcc1, Jul 8, 2007
    #8
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your log is fine.

    If you are not having any other malware problems, it is time to do our final steps:
    1. You can delete the ShowNew.Zip and GetRunkey.Zip files and the files that you extracted from the ZIP files. You can also delete the C:\newfiles.txt and C:\runkeys.txt logs that were created
    2. After doing the above, you should work thru the below link
     
    chaslang, Jul 9, 2007
    #9

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds