chupacabra removal

[zebis]

dear acronis,

upon updating my spyware database today as well as the other day, I noticed a spyware update called chupacabra. After running the spyware removal utility, Chupacabra has shown up many times now. It seems PES8 finds chupacabra and removes it. After rebooting , chupacabra shows up again. and again, and again. is there another method to removing this piece of spyware.

Please inform me if there is another method of removal


sincerely,

zebis

[Acronis Support]

Hello zebis,

Thank you for choosing Acronis Internet Privacy and Antispyware Software (http://www.acronis.com/homecomputing/products/privacyexpert/).

First of all please download the latest build (748 ) of Acronis Privacy Expert Suite 8.0 (http://www.acronis.com/homecomputing/my/updates/). In order to get access to updates you should register account (http://www.acronis.com/homecomputing/my/registration/) on our site (or just log in if you have already created it) and then register your copy of the product (http://www.acronis.com/homecomputing/my/products/registration/).

Please accept our apologies for your inconvenience. The issue with Chupacabra has been resolved and the fix will be available in the nearest update.

Thank you.
--
Irina Shirokova

[zebis]

dear acronis,

just to let you know that i am using the latest 748 build of PES8. i have noticed that the chupacabra spyware definition was added a few days ago along with another definition as of recent. I think this may be a false positive as there may be a problem with that particular Chupacabra definition. It seems that PES8 finds it and removes it, but upon rescanning immediately after removal it finds it again. Chupa.exe does not show in my starup list or under my process list.

i have tried this in both normal windows mode as well as safe mode.

please keep me informed of a possible fix for this issue. i am hoping this is easily fixable.

sincerely,

zebis

[delta77]

I got the same problem here. I even tried to reformat the entire hard drive and resintall Windows XP. Then I installed Version 8 without any updating, and I got no problem after scanning. However I got this threatening CHUPACABRA thing after I tried an update. I am very sure that my computer is totally cleaned and free from any treats and virus.

I believe there is some sort of bugs here.............

[Дмитрий]

dear Irina,I got the same problem here and i am using the latest 748 build of PES8.I think there is some sort of bugs here.What can I do? Thank you.

[disabled]

Hi All, Yup I have the same problem I have the latest Build ect must there be a concern about this? afterall it does show up as a Trojan Horse Danger Level 4-Thanks

[Acronis Support]

Hello all,

The problem with chupacabra is already solved and the new spyware base update with the fix will be available very soon. We are really sorry for temporary inconvinience.

Thank you.
--
Ilya Toytman

[zebis]

dear ilya,

Thank you very much for the response. im sure we all look forward to the fix when it becomes available.

keep up the good work guys.

sincerely,

zebis

[drbugfree]

Have the same problem also!! Have really frustrated me. Windows XP Lastest Version, all updates. Running Norton system works, did not pick it up, or did Ad-Aware Pro. Formated Drive! Bought another program that would also suppose to remove this CHUPA (goat sucker) chupacabra but did not pick it in the scan also, So this is telling me that PES8 is causing a lot of people alot of unnessarry GRIEF! I was ready to Format again till I checked the forum. Hope they post the new fixes REAL SOON cause this is !*%@#

[disabled]

Thanks looking forward to the fix

[Titanium 22]

I was just reading in the forum about all the problems and glad I am not the only one with this. I was wondering as to why the hell this would keep showing up on my system after I did a install 5 times and had nothing loaded besides acronis. I love acronis but I am very very pissed off that they would lete something like this slip. This is something that can really freak a person out.

Hope it gets solved soon.

[Titanium 22]

I think I have found a solution to the problem, delete the file in the REG under :

H_KEY_CURRENT_USER
SOFTWARE
MICROSOFT
WINDOWS NT
CURRENTVERSION
WINDOWS

THEN DELETE THE FILE (run)

This stopped Acronis from finding the file in all my scans.

hope this helps.

[drbugfree]

Are you sure by deleting run it wont disable anything else? I tried deleting (load) but still comes back.

[jcrappard]

I guess I should have come hours ago. I have had the same problems, I googled and been all over the MS site for info on chupacabra. I even been in and changed the registry by doing a renane of where PE claims there is a trojan, then PE doesn't find any problems. As soon as I put the load ley back in (which BTW is blank) PE finds a trojan.

[jcrappard]

-{ Quote: "Are you sure by deleting run it wont disable anything else? I tried deleting (load) but still comes back." }-

I did a rename of load to stop the problem, renamed back to load and problem reappeared. I would just leave alone until the fix comes out.

[justplanebill]

I have had similar experience with Chupacabra like the rest of you.

What we really need to know is how this trojan horse makes our systems vulnerable.

What does it do?

My firewall can't stop it because it does not recognize "Chupacabra".

According to Google listings, Port 1 UDP is how it accesses the internet so I used my firewall to shut down in/out flows through that port.

Is this a good temporary fix?

I hesitate to delete the Registry files. You know, I'm timid.

What do you all think?

[jcrappard]

I have found several internet sites that all have something different on chupacabra, then McAfee and Microsoft have nothing. I wonder if it is a hoax. I think Acronis PE is giving us false positives, wish their tech support would say.

[Дмитрий]

Allo,Acronis Support!!! Where are you?

[jcrappard]

Com on support tell us either to ignore the chupacabra or what to do. I don't think there is a trojan on my machine and am not sure chupacabra is even valid trogan. MS, Mcafee and Norton know nothing about chupacabra. Also, the update from the 19th didn't change anything.

[TheQuest]

Hi, jcrappard and Дмитрий

I think it is a false positive, [pretty sure] if you read both #2 & #7 above, it was meant to be fixed but as not been. Acronis Privacy Expert Suite should have a way of Quarantining a file to submit, or somebody will trash the system with the FP [delete only] it keeps giving,

It has giving a FP on TDS-3 since it;s first database and still never been fixed to this day.

I can ran it just for fun, I can do not consider it a real [my which mean good and one to rely on] Spyware finder and removal program. IMO, I wish Acronis would give the choice to not Install it [the spyware part , I think it is a wast of space.] when we install or update Acronis Privacy Expert Suite.

There my first moan at a Acronis [part of] Product. which I very much regret having to do.

Please try fixing and improving it? ie Quarantining, Please Acronis Support.

Take Care,
TheQuest 8)

[drbugfree]

This is what I found about Chupacabra. Summary: Causes mouse lurch, shuts down windows, formats hard disk, hides/shows the taskbar, gives win 3.x look to machine at startup, etc. For full details go to: eTrust Spyware Encyclopedia, type in Chupacabra in the Search.

[Acronis Support]

Hello all,

Please do not delete the "Chupacabra" entry. We will implement the fix in spyware update very soon. Please accept our apologies for your temporary inconvenience.

Thank you.
--
Ilya Toytman

[TheQuest]

Hi, Acronis Support

-{ Quote: "It has giving a FP on TDS-3 since it;s first database and still never been fixed to this day." }-
Seems like that one FP you will not need to fix ever, as TDS software line has been discontinued.

Take Care,
TheQuest 8)

[disabled]

Well, Well this thread is either becoming confusing or rediculous... Some say Delete file Acronis supporter says Don't they are going to sort it out... This in fact was said last Week-end Must be one Helluva Problem because I've just downloaded the latest updates and it's still THERE...

[Lisa in MD]

Had the same problem!! Keep trying and it says it's still there. Make you a little nervous to work. Thanks for posting. We'll keep checking.

[TheQuest]

Hi, disabled

-{ Quote: "Some say Delete file Acronis supporter says Don't they are going to sort it out... " }-
Best do as Support says, they know it is a FP.

Take Care,
TheQuest 8)

[TheQuest]

Hi, All

Any news from anybody who had this FP, as it been fixed.

Take Care,
TheQuest 8)

[Propaganda]

-{ Quote: "Hello all,

Please do not delete the "Chupacabra" entry. We will implement the fix in spyware update very soon. Please accept our apologies for your temporary inconvenience.

Thank you.
--
and why not? are YOU (Acronis) purposely installing spyware??? this is rediculous...

[Detox]

why not? because it is a FALSE POSITIVE! That means that PE is/was detecting the malware then the malware is actually not there. When a false positive occurs, the detecting program has simply identified something else as some particular malware. This happens with all scanner etc. from time to time. If you delete the entry, then you delete whatever regular program it is that was incorrectly identified.

[Acronis Support]

Hello all,

I am really sorry for the inconvenience. The problem with chupacabra will be fixed in SpywareUpdate b605.

Thank you.
--
Irina Shirokova

[Дмитрий]

SpywareUpdate b605. -????????????

[Acronis Support]

Hello Дмитрий,

This update is scheduled for release by the end of this week so we would be grateful if you downloaded it as soon as it became available and let us know your results with it.

Thank you.
--
Irina Shirokova

[Дмитрий]

Thanks,Irina,ok

[zebis]

Dear Acronis,

Upon downloading the latest spyware updates which seemed to have problems for alot of people. I'm happy to say the the chupacabra problem is now fixed.

Thanks acronis,

Keep up the good work

Sincerely,

Zebis

[Acronis Support]

Hello zebis,

Please accept our sincere apologies for your inconvenience. We are really sorry that this problem has taken so much time.

Thank you.
--
Irina Shirokova

[ryno]

I still have this problem. I am running PES ver. 8 build 748 with defs updated on 08-15-05 and it still comes back. Please help

[Acronis Support]

Hello ryno,

Please download the latest Spyware update and see whether the problem remains. Please also tell me your actions: 1. You scan your computer 2. Delete chupacabra 3. Scan and Acronis Privacy Expert Suite find chupacabra again. Am I correct? If yes, please create a screenshot of what Acronis Privacy Expert Suite found on your computer and send it to support@acronis.com along with the link to this thread, also please indicate in the subject that you want to contact Irina Shirokova.

Thank you.
--
Irina Shirokova