Cannot remove ScorpionSaver from Adpeak

macmets

New Member
Thread author
Dec 6, 2013
8
When trying to remove ScorpionSaver from my computer I get the following message: "The feature you are tying to use is on a network resource that is unavailable."

There are two instances of this program in my desktop computer. One is Scorpion Saver and the other is ScorpionSaver Services.

This is a pernicious program that I was able to remove a few weeks ago but it has now reappeared and I am not able to remove it. When it "is" removed, how can I prevent it from creeping back?

Below are the scans. Thank you for your help.

[attachment=6491]
 

Attachments

  • otl.txt
    61 KB · Views: 109

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Hi,


Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
  • Click on the Scan button.
  • After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Post logfile will also be saved in the C:\AdwCleaner folder.


When you finish with Adwcleaner, follow this:



Please download zoek.zip or zoek.rar by smeenk (
Zoek_icon.png
) from here or here and save it to your Desktop.
Unpack the archive...
  • Close any open browsers
  • Temporarily disable your AntiVirus program. (If necessary)
    If you are unsure how to do this please read this or this Instruction.
  • Double click on zoek.exe to run the tool .
    Please wait while the tool does not start...
  • Copy the text present inside the code box below and paste it into the large window in the zoek tool:

    Code:
    createsrpoint; 
    StandardSearch; 
    installer-list; 
    installedprogs; 
    uninstall-list;
  • Click on
    Run%20Script%20by%20zoek.png
    button.
    Please wait until a logreport will open (this can be after reboot)
  • Save notepad to your Desktop and attach here zoek-results.log
    Note: It will also create a log in the C:\ directory named "zoek-results.log"
 

macmets

New Member
Thread author
Dec 6, 2013
8
[attachment=6490]


[attachment=6492]
 

Attachments

  • adwcleaner.txt
    15.7 KB · Views: 134
  • zoek.txt
    48.3 KB · Views: 141

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Your zoek log is incomplete, can you just attach it.


You can use Attachments option below...just choose the zoek report. It is located in the C directory as zoek-results.log
 

macmets

New Member
Thread author
Dec 6, 2013
8
Tried to attach by the file type was not allowed. But I'll copy and paste again. Let me know if this is all of it.

[attachment=6493]
 

Attachments

  • Zoek.txt
    63.9 KB · Views: 152

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
> Re-run zoek with this script and attach here fresh zoek log results.


Code:
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3A9F56B942D9A2546BFE41756DE52495];r
c:\Windows\Installer\4e4189d.msi;f
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6BA018E6E43F3A949AF3E90563067F81];r
c:\Windows\Installer\1459ce65.msi;f
emptyalltemp;
emptyclsid;
autoclean;
C:\Windows\Sysnative\AdpeakProxy64.dll;f
C:\Windows\Sysnative\Tasks\{91CAC7EC-E08A-4EC4-9119-93BA57B4E711};f
netsh winsock reset;b



How are the things now?
 

macmets

New Member
Thread author
Dec 6, 2013
8
I copied and pasted the script to zoek but keep getting this response: "an error has occurred in the script on this page."
 

macmets

New Member
Thread author
Dec 6, 2013
8
Never mind, I got it to work. Here is the result. http://www27.zippyshare.com/v/57904456/file.html
 

macmets

New Member
Thread author
Dec 6, 2013
8
Happy to say that ScorpionSaver is completely gone - thanks to you - and my computer is working just fine. I'm concerned it will eventually find it's way back, as it did before, is there any way to prevent that? Thanks again! I truly appreciate it!
 
  • Like
Reactions: Jack

TwinHeadedEagle

Level 41
Verified
Mar 8, 2013
22,627
Good to hear it :)

There is no protection for this kind of threats, because users allow them to be installed. My best advice is to watch for every part of software installation, and to download it only from official sites.



Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

> I don't need DelFix log report.
 
  • Like
Reactions: Jack

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top