support.net

Discussion in 'Malware Help (A Specialist Will Reply)' started by exmurdoc, May 3, 2005.

  1. exmurdoc

    exmurdoc Private E-2

    I am having problems, of course I am, that's why I'm here. I am running a panda scan as I type. I did a STUPID thing and installed AOLIM yesterday. I am now crawling on the net and can't load any ftp sites. I've been reading here and am doing the things you guys suggest. I've uninstalled im. I have Adware, and symantec. Both up to date. There is a folder under program files called "support.net" I have no idea where it came from. There are activex controls that use files in that directory listed in IE. It seems that it has saved EVERYTHING that I've done on this computer. It was created in March when I was given this computer. What is it?
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Have you know uninstall AIM? It also install a bunch of other crap, one program it in that list is Viewpoint Manager. Also uninstall it. Also look for anything saying WildTangent and uninstall it too.

    If you are having malware issues, follow the steps below.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. exmurdoc

    exmurdoc Private E-2

    Yes I have uninstalled AIM. I have run all the scans in your "read first before posting". This folder,c:\program files\support.com, has a backup of everything I've done on this computer since I got it. There are registry entries concerning it and tell my computer to make hidden folders. I did a search for a running process called ccapp.exe. It's supposed to be part of Symantec, from what I've read. The results are strange. All the search results show the "in folder" starting with c:\ but one. That one says "in folder" "SUPPORT\CCCOMMON|CCCOMMON". No "c:\" in front of it. And the file is all caps, not lowercase. I am in the process of removing anything that has to do with SUPPORT.COM from the registry including searching the dll files in the bin sub directory of support.com. When I get done with that, I will run hijackthis and post results per your instructions.
     
  4. exmurdoc

    exmurdoc Private E-2

    What got me looking for problems was my download speed got really slow. I have DSL that supposed to be 256 upload and 1.5 download. I was downloading at 38-70kbs. I ran all the tools in your post and removed a bunch of crap. Each one found more stuff. Bellsouth ran a line test and found no problems, but it's still slow. NOTHING found anything wrong with this support.net folder. I have a problem with it as it is eating up disk space and as I said recording everything I do on this computer. When I tried to delete it I got access denied, it was running some dll files. So now I am getting rid of everything in the registry and going to restart and try to delete it. There where activex references to it in IE helper apps, which I disabled.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Is it support.com or support.net as stated in your first message? And are you sure that it is not a program that came with your PC? Did you look in Add/Remove programs for anything you do not recognize?

    Complete the steps I gave you in my previous message.
     
  6. exmurdoc

    exmurdoc Private E-2

    It was SUPPORT.COM. The folder was created just after I got this computer. A friend gave it to me. I've deleted the folder and any references to it in the registry, I hope. I still have no idea what it was or where it came from. I ran all the tools in your read me first before asking for support. I'm clean now according to everything. I found nothing in add/remove about it. I didn't find Viewpoint Manager or WildTangent. Now AD-Watch is not blocking cookies. I tried uninstall and install. Still not blocking. Toolbars keep changing themselves. I gave up and bought a new computer, this one's a P-3 667 with a whooping 128 megs. I'll format this one and give it back, so at this point it really dosen't matter. Just maybe something you guys might run into from someone else. Where ever it came from, I don't want to end up screwing up the new computer. What do you recommend I install for protection on a new computer? Thanks for the help and info you provide here.
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds