That's a bit like killing a fly w/a shotgun, at least for this particfular beastie. David, go to Programs & Features & uninstall it. Truth be told, it isn't malware in the classic sense, though I wouldn't give u a plug nickel for it, & IMO, the machine surely is better off w/o it. On 9/9/13, Matthew White wrote:

Backup data to an external disk, wipe the drive, reinstall Windows.

On 9/9/2013 1:28 PM, David Mehler wrote:

...

Hello Everyone,

I've got an x86 win7 box that came to me for help. The report was the internet was slow and the box had slowed down. Well, checking it I know why, someone had turned *off* UAC entirely and installed a bunch of stuff, a tpm (Trusted platform module) program, and a wireless driver it looks like someone was atempting to do win7 wireless sniffing just as a guess. There were also a torrent program and something called zlosk messenger that was the obvious stuff, in addition there's something called conduit search protect which is malware, and was described by a page on the net as having rootkit characteristics but not being one. Well, I've thrown essentials and malware bytes at it, both with the latest updates, and that's not clearing it. Some pages show recommendations to deal with it, but I have never heard of any of the programs, they're not made by a familiar vendor so I don't touch them. I've got the box disconnected from the net, in my experience some of this malware phones home as I call it for help, which is what I don't want.

I'd appreciate any recommendations or if you've fought and killed this thing previously what you've used.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-- Blame the computer--why not? It can't defend itself & occasionally might even be the culprit Jackie McBride Ask Me Computer Questions at: www.pcinquirer.com Jaws Scripting training materials: www.screenreaderscripting.com homePage: www.brighter-vision.com

U know, Dave, under the circumstances, u might think about pullin the hard drive hookin it up to a USB enclosure, & scanning w/an antivirus & antispyware scan. Rootkits tend to be more easily discovered via this method. On 9/9/13, David Mehler wrote:

Hi,

Thanks, add/remove killed it, but there was other adware and other stuff, just junk on the box. I think I have got it all, running one last bit of malware bytes and hopefully that'll be the end of it.

Yah, IMO as well, this box is definitely better without it.

Thanks. Dave.

On 9/9/13, Jackie McBride wrote:

...

That's a bit like killing a fly w/a shotgun, at least for this particfular beastie.

David, go to Programs & Features & uninstall it. Truth be told, it isn't malware in the classic sense, though I wouldn't give u a plug nickel for it, & IMO, the machine surely is better off w/o it.

On 9/9/13, Matthew White wrote:

...

Backup data to an external disk, wipe the drive, reinstall Windows.

On 9/9/2013 1:28 PM, David Mehler wrote:

...

Hello Everyone,

I've got an x86 win7 box that came to me for help. The report was the internet was slow and the box had slowed down. Well, checking it I know why, someone had turned *off* UAC entirely and installed a bunch of stuff, a tpm (Trusted platform module) program, and a wireless driver it looks like someone was atempting to do win7 wireless sniffing just as a guess. There were also a torrent program and something called zlosk messenger that was the obvious stuff, in addition there's something called conduit search protect which is malware, and was described by a page on the net as having rootkit characteristics but not being one. Well, I've thrown essentials and malware bytes at it, both with the latest updates, and that's not clearing it. Some pages show recommendations to deal with it, but I have never heard of any of the programs, they're not made by a familiar vendor so I don't touch them. I've got the box disconnected from the net, in my experience some of this malware phones home as I call it for help, which is what I don't want.

I'd appreciate any recommendations or if you've fought and killed this thing previously what you've used.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-- Blame the computer--why not? It can't defend itself & occasionally might even be the culprit Jackie McBride Ask Me Computer Questions at: www.pcinquirer.com Jaws Scripting training materials: www.screenreaderscripting.com homePage: www.brighter-vision.com

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-- Blame the computer--why not? It can't defend itself & occasionally might even be the culprit Jackie McBride Ask Me Computer Questions at: www.pcinquirer.com Jaws Scripting training materials: www.screenreaderscripting.com homePage: www.brighter-vision.com

Hi, Thanks, add/remove killed it, but there was other adware and other stuff, just junk on the box. I think I have got it all, running one last bit of malware bytes and hopefully that'll be the end of it. Yah, IMO as well, this box is definitely better without it. Thanks. Dave. On 9/9/13, Jackie McBride wrote:

That's a bit like killing a fly w/a shotgun, at least for this particfular beastie.

David, go to Programs & Features & uninstall it. Truth be told, it isn't malware in the classic sense, though I wouldn't give u a plug nickel for it, & IMO, the machine surely is better off w/o it.

On 9/9/13, Matthew White wrote:

...

Backup data to an external disk, wipe the drive, reinstall Windows.

On 9/9/2013 1:28 PM, David Mehler wrote:

...

Hello Everyone,

I've got an x86 win7 box that came to me for help. The report was the internet was slow and the box had slowed down. Well, checking it I know why, someone had turned *off* UAC entirely and installed a bunch of stuff, a tpm (Trusted platform module) program, and a wireless driver it looks like someone was atempting to do win7 wireless sniffing just as a guess. There were also a torrent program and something called zlosk messenger that was the obvious stuff, in addition there's something called conduit search protect which is malware, and was described by a page on the net as having rootkit characteristics but not being one. Well, I've thrown essentials and malware bytes at it, both with the latest updates, and that's not clearing it. Some pages show recommendations to deal with it, but I have never heard of any of the programs, they're not made by a familiar vendor so I don't touch them. I've got the box disconnected from the net, in my experience some of this malware phones home as I call it for help, which is what I don't want.

I'd appreciate any recommendations or if you've fought and killed this thing previously what you've used.

Thanks. Dave.

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins

-- Blame the computer--why not? It can't defend itself & occasionally might even be the culprit Jackie McBride Ask Me Computer Questions at: www.pcinquirer.com Jaws Scripting training materials: www.screenreaderscripting.com homePage: www.brighter-vision.com

_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins