Mini Spy

Loading...
 
  1. Before you start!
    All given instructions in this forum are customized for each help request, the tools used may cause damage if used on a computer with different infections. If you think you have similar issues, please post the appropriate logs in our Malware Removal Assistance forum and wait for help.

    Please be aware that removing Malware is a potentially hazardous undertaking. We will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for us to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and we cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.
    We strongly advise you to backup any personal files and folders before you start.

Cannot remove ScorpionSaver from Adpeak

Discussion in 'Malware Removal Assistance' started by macmets, Dec 6, 2013.

  1. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    When trying to remove ScorpionSaver from my computer I get the following message: "The feature you are tying to use is on a network resource that is unavailable."

    There are two instances of this program in my desktop computer. One is Scorpion Saver and the other is ScorpionSaver Services.

    This is a pernicious program that I was able to remove a few weeks ago but it has now reappeared and I am not able to remove it. When it "is" removed, how can I prevent it from creeping back?

    Below are the scans. Thank you for your help.

    [attachment=6491]
     

    Attached Files:

    • otl.txt
      File size:
      61 KB
      Views:
      78
  2. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    Hi,


    Please download AdwCleaner by Xplode and save to your Desktop.

    Double click on AdwCleaner.exe to run the tool.
    • Click on the Scan button.
    • After the scan has finished click on the Clean button.

    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Post logfile will also be saved in the C:\AdwCleaner folder.


    When you finish with Adwcleaner, follow this:



    Please download zoek.zip or zoek.rar by smeenk ([​IMG]) from here or here and save it to your Desktop.
    Unpack the archive...
    • Close any open browsers
    • Temporarily disable your AntiVirus program. (If necessary)
      If you are unsure how to do this please read this or this Instruction.
    • Double click on zoek.exe to run the tool .
      Please wait while the tool does not start...
    • Copy the text present inside the code box below and paste it into the large window in the zoek tool:

      Code:
      createsrpoint; 
      StandardSearch; 
      installer-list; 
      installedprogs; 
      uninstall-list; 
    • Click on [​IMG] button.
      Please wait until a logreport will open (this can be after reboot)
    • Save notepad to your Desktop and attach here zoek-results.log
      Note: It will also create a log in the C:\ directory named "zoek-results.log"
     
  3. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    [attachment=6490]


    [attachment=6492]
     

    Attached Files:

  4. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    Your zoek log is incomplete, can you just attach it.


    You can use Attachments option below...just choose the zoek report. It is located in the C directory as zoek-results.log
     
  5. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    Tried to attach by the file type was not allowed. But I'll copy and paste again. Let me know if this is all of it.

    [attachment=6493]
     

    Attached Files:

  6. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    It is not yet complete. Upload the report here

    http://zippyshare.com/

    Copy here download link...
     
  7. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    http://www65.zippyshare.com/v/17439335/file.html
     
  8. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    > Re-run zoek with this script and attach here fresh zoek log results.


    Code:
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3A9F56B942D9A2546BFE41756DE52495];r
    c:\Windows\Installer\4e4189d.msi;f
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6BA018E6E43F3A949AF3E90563067F81];r
    c:\Windows\Installer\1459ce65.msi;f
    emptyalltemp;
    emptyclsid;
    autoclean;
    C:\Windows\Sysnative\AdpeakProxy64.dll;f
    C:\Windows\Sysnative\Tasks\{91CAC7EC-E08A-4EC4-9119-93BA57B4E711};f
    netsh winsock reset;b
    


    How are the things now?
     
  9. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    I copied and pasted the script to zoek but keep getting this response: "an error has occurred in the script on this page."
     
  10. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    Never mind, I got it to work. Here is the result. http://www27.zippyshare.com/v/57904456/file.html
     
  11. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    Ok, how are the things now?
     
  12. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    Happy to say that ScorpionSaver is completely gone - thanks to you - and my computer is working just fine. I'm concerned it will eventually find it's way back, as it did before, is there any way to prevent that? Thanks again! I truly appreciate it!
     
    Jack likes this.
  13. TwinHeadedEagle

    TwinHeadedEagle Malware Removal Expert MalwareTips Staff

    Reputation:
    1,000
    Joined:
    Mar 8, 2013
    Messages:
    9,684
    Likes Received:
    680
    Good to hear it :)

    There is no protection for this kind of threats, because users allow them to be installed. My best advice is to watch for every part of software installation, and to download it only from official sites.



    Please download DelFix by "Xplode" to your Desktop.

    Run the tool and check the following boxes below;
    • Remove disinfection tools
    • Create registry backup
    • Purge System Restore

    Now click on "Run" button. Wait for the programme completes his work.
    All the tools we used should be gone.
    Tool will create and open an log report (DelFix.txt)
    Note: The report will also be stored on C:\DelFix.txt

    > I don't need DelFix log report.
     
    Jack likes this.
  14. macmets

    macmets New Member

    Reputation:
    0
    Joined:
    Dec 6, 2013
    Messages:
    8
    Likes Received:
    1
    Done. Thanks again!
     

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Loading...
MalwareTips.com is an independent website.All trademarks mentioned on this page are the property of their respective owners.