HELP

Discussion in 'other anti-malware software' started by uksenior, Sep 21, 2003.

Thread Status:
Not open for further replies.
  1. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    o_O
    I am getting a lot of entries of the spy VX2.BETTERINTERNET...which spyblaster is not picking up on...I have looked at the defs in spyblaster and see that VX2.ABETTERINTERNET is listed..Could it be that this is a new variant and they have just omitted the 'a' or is it a new spy that you havent added yet...Ad aware is removing it,,but its getting a pain as I am getting between 1-15 of these things more than once a day!!! please help


    This is what it looks like in ad aware log:


    VX2.BetterInternet Object recognized!
    Type : File
    Data : ~dfedfb.tmp
    Category : Data Miner
     
  2. Peaches4U

    Peaches4U Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    5,070
    Location:
    At my computer
    Are you regularly updating your SpywareBlaster definitions? If you are, then perhaps you are getting the data miners via java applets. To prevent this from happening download IE-SPYAD and problem should be taken care of. However, be sure to check the Updates forum here to find out when IE-Spyad has updates available. Good luck. :)
     
  3. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    Thankyou :)
    Yes I look for updates everyday...I will try spyadd..if that doesnt work it looks like I will have to get adaware pro :eek:
     
  4. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    o_O
    Well I couldnt find IE-SPYAD anywhere,I have been over an hour looking for it!!! But....as I have NIS 2003 with add blocking,is it really what I want??
    What I need is the CLID for VX2.Betterinternet so that I can put it in manually.
    And asap ,had another 3 this morning!! :rolleyes:
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    Please go to http://www.tomcoyote.org/hjt/, and download 'Hijack This!'.
    Unzip, doubleclick HijackThis.exe, and hit "Scan".

    When the scan is finished, the "Scan" button will change into a "Save Log" button.

    If you look at the log under O16 DPF you should see them listed with their CLSID. If they really are ActiveX, that is.

    If you are unsure in any way, please post the log and I will have a look.

    Regards,

    Pieter
     
  6. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    :cool:
    Thankyou pieter,, I dont think it is an activex..Adaware has already removed it 3 times this morning!!! and I removed it manually out of local/temp files under heading: ..DF439D.tmp
    But here is my log;

    Logfile of HijackThis v1.97.2
    Scan saved at 11:22:05, on 22/09/2003
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Norton Internet Security\NISUM.EXE
    C:\Program Files\Symantec\DeepSight Extractor\ccExtractorService.exe
    C:\Program Files\Norton Internet Security\ccPxySvc.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Symantec\DeepSight Extractor\ExtractorService.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton Utilities\NPROTECT.EXE
    C:\Program Files\Speed Disk\nopdb.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\optmouse.exe
    C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\WEATHE~1\ww.exe
    C:\PROGRA~1\MailWasher Pro\MAILWA~1.EXE
    C:\Program Files\Yahoo!\Messenger\ypager.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Documents and Settings\joan sisson\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ntlworld.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = inktomi1-not.server.ntl.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - Default URLSearchHook is missing
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1.1\SDHelper.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
    O4 - HKLM\..\Run: [OPTMOUSEMOUSE] C:\WINDOWS\System32\optmouse.exe
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [WeatherWatcher] C:\PROGRA~1\WEATHE~1\ww.exe
    O4 - HKCU\..\Run: [MailWasher] C:\PROGRA~1\MailWasher Pro\MAILWA~1.EXE
    O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    O4 - Startup: Hewlett-Packard Recorder.lnk.disabled
    O4 - Global Startup: HPAiODevice(hp psc 900 series) - 1.lnk.disabled
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
    O9 - Extra button: Money Viewer (HKLM)
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: JT's Blocks - http://download.games.yahoo.com/games/clients/y/blt0_x.cab
    O16 - DPF: symsupportutil - https://www-secure.symantec.com/techsupp/activedata/symsupportutil.CAB
    O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
    O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot2_x.cab
    O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/games/clients/y/mjst0_x.cab
    O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potb_x.cab
    O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/games/clients/y/pyt1_x.cab
    O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} (Microsoft Office Template and Media Control) - http://office.microsoft.com/templates/ieawsdc.cab
    O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.i1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37868.1396759259
    O16 - DPF: {AB9820A0-02A9-11D5-A72F-004F4E002BD6} (JFC Classes) - http://igweb04.iamgame.com/java2/cabs/swing.cab
    O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {CD17FAAA-17B4-4736-AAEF-436EDC304C8C} - http://a840.g.akamai.net/7/840/5805/v1503/www.contentwatch.com/audit/includes/ContentAuditControl.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
     
  7. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    Check the items listed below in HijackThis, close all windows except HijackThis and click Fix checked:
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - Default URLSearchHook is missing

    Then reboot. Just some leftovers, nothing serious.
    No ActiveX indeed.
    Could they be coming from a site you are visiting?

    Regards,

    Pieter
     
  8. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    Thankyou,,,Have done that :)
    As I had not been to any sites except to check for isp's via ip's, you made me think!! ;)
    I ran adaware again,,there was 3 more betterinternets ,,so I went to manually remove them and couldnt because something was using them..Think I found the culprit,,well hope so :rolleyes:
    Weather watcher!!!
    took that out and so far,fingers crossed, no more betterinternet :p
     
  9. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    Could you PM me where you downloaded that program?
    I'll have it investigated and blacklisted if necessary.
    The weather is bad enough as it is, why do they have to put spyware in every program about it? ;)

    Regards,

    Pieter
     
  10. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    :)
    sorry to be so long,,been for my flu jab..lol Here is the site and I just checked nothing so far.. :D

    hxxp://security.webattack.com/authorinfo/apps-7116938.html







    Disabled the link for the time being
     
  11. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Thanks. I'll install it on my testbox and see what it does.

    I'll keep you posted,

    Pieter
     
  12. claire

    claire Guest

    Hi Uksenior,

    Here you can find IE-SPYAD

    http://www.staff.uiuc.edu/~ehowes/resource.htm ;)
     
  13. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    I've installed the program and it is spyware free.
    It must have been the updates that were flagged as spyware.
    Could you please mail me one of the backups made by AdAware so I can have a look?

    The addy is in my profile.

    Regards,

    Pieter

    PS I have sent a mail to the developer of Weather Watcher with a link to this thread asking him for his view on this matter.
     
  14. Mike Singer

    Mike Singer Registered Member

    Joined:
    Sep 22, 2003
    Posts:
    1
    That ~*.TMP file is being created in the Temp directory by Weather Watcher when Weather Watcher is launched. The file is automatically deleted when Weather Watcher is shut down. As for the use of the temp file, I really cannot answer that. It has something to do with the fact that Weather Watcher is written in Microsoft Visual Basic (see below for my best explanation).

    As for the file being part of a data miner? I am 100% sure that this is not the case. I wrote 100% of the Weather Watcher code, so it wouldn't be possible for spyware to sneak in there. Ad-aware clearly has a bug in it, which is identifying that temp file as a data miner.

    So, you think Ad-aware is 100% correct? Don't bet on it ;) I've found at least 1 bug in almost every program that I've ever used (even Weather Watcher :D). Now, you don't have to take my word... I'll prove my point. The following is an e-mail that I sent to someone else who asked me this same very question.


    [hr]
    Scott-

    I've attached a .ZIP file to this e-mail. It includes the following files:
    1.exe
    2.exe
    ww1.exe
    ww2.exe

    Please read my e-mail and use those files as I talk about them. I'm going to quote you as I go along to make it easier for you to follow along.

    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    You are correct in that AdAware does not remove the VX2 data miner as it should.
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    This is because it's impossible to remove a file that is in use by Windows. Since Weather Watcher is using that temp file, AdAware cannot delete it.


    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Most importantly, I have applied a very scientific approach to isolating this dataminer and it indeed serves as a parasite to your program.
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    As I tried to point out in my last e-mail, that temp file is definitely created by Weather Watcher. There is no need for further testing because I already acknowledged that you made a correct assumption.

    I just downloaded AdAware to try it out and it did find that temp file when Weather Watcher was running. AdAware does not say what that temp file is connected to, but you can easily figure this out by following the steps that you have documented in your last e-mail.


    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    I wonder if your site host (Metal Forum) could have dropped this in during the download process?
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    This just wouldn't be possible. I created both the program and installation files myself. Someone would have to decompile those files in order to insert a data miner into Weather Watcher.

    To prove my point here... I list the file sizes of my downloads on my web site. I know the exact size of my downloads because I check before uploading them to my mirror sites. If it was possible to attach a data miner after I've uploaded the setups, the size of the setups would change. The size of the setups are exactly as I've posted, so that proves that nothing was attached after the setups were uploaded.


    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    You may want to contact a nonbiased user and have them check for this dataminer if they are using your latest version.
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    This would be pointless since I am 100% sure that Weather Watcher (and the rest of my software) is spyware free. However, it looks like you need some proof. This is where those 4 files from above come into play. Follow the steps below and you'll see that I have proof that Weather Watcher is not bundled with a data miner (the one reported by AdAware).

    1. First, let me show you that my programs create temp files in the temp directory when run. When the programs are closed, they delete the temp file (just as Weather Watcher does). At first, I wasn't sure why these temp files were being created. I narrowed it down by deleting lines of code... I found out that any programs that have custom icons will create a temp file in the temp directory when run.
    Here is proof of this (test #1):

    A. Run "1.exe". Check your temp directory... you won't see a temp file.
    B. Run "2.exe". Check your temp directory... you'll see a temp file.

    Those 2 files are exactly the same, except for the fact that "2.exe" has a custom icon. If you run AdAware, you'll see that it does not find a data miner when it scans the temp directory.
    2. OK... now let's prove that Weather Watcher is not a data miner. Before you continue, open up your Weather Watcher directory (default = "C:\Program Files\Weather Watcher") and make a backup copy of the "ww.exe" file. Also, make sure that Weather Watcher is not running.
    Now to prove that Weather Watcher is not a data miner (test #2):

    A. Rename the "ww1.exe" file to "ww.exe". Copy that file to your Weather Watcher directory (overwrite the "ww.exe" that is there since you backed it up). Now, start Weather Watcher and scan the temp directory with AdWare. As you'll see, AdAware warned you that you have a data miner in your temp directory, which is the temp file currently being used by Weather Watcher. This test also goes to show that MetalForums.com did not attach a data miner after I uploaded the setup.

    B. Now, let's try "ww2.exe", which is an exact copy of "ww1.exe", without the custom icon. Shut down Weather Watcher. Rename the "ww2.exe" file to "ww.exe" and copy that file to your Weather Watcher directory (overwrite the "ww.exe" that is there. Now, start Weather Watcher and scan the temp directory with AdWare. As you'll see, AdAware does not find a data miner in the temp file that was created by Weather Watcher.
    These tests show 2 things. One, it shows that Weather Watcher does not include a data miner. This is proved by running the moded Weather Watcher program file that does not include the custom icon. Test #1 shows that the temp file is created in the temp directory when the program has a custom icon, so there should be no questions as to how that temp file gets there.

    I have no clue why the temp file must be created when the program uses a custom icon. This would be a question for Microsoft. I would imagine that it would be very hard to get in touch with someone at Microsoft that would know the answer to this question. However, if you choose to pursue that, I would be interested in hearing what they have to say. I've spent about 2 hours proving this point to you, so I think it would be a waste of time for me to pursue this further.

    As for AdAware, like I said before, their software has a bug in it. Their software scans those temp files for some type of pattern, which is associated to a data miner. By the proof that I have put together, you can see that AdAware has falsely identified Weather Watcher as a data miner.

    So, what do you think? Is this enough proof to convince you that AdAware has flaws?

    Regards,
    Mike~
    [hr]


    If interested, you can download the above file attachment here:
    http://www.MetalForums.com/singerscreations/files/TestForScott.zip

    If you have any other questions, please don't hesitate to contact me via e-mail at Mike@SingersCreations.com.
     
  15. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi Mike Singer,

    Welcome at Wilders and thank you for answering my request so promptly.

    Did you ever contact LavaSoft about this f/p?

    Regards,

    Pieter
     
  16. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    Sorry.I just logged on..
    I have used adaware and it reports no bugs at all..
    Here is the log entry which had the bug

    VX2.BetterInternet Object recognized!
    Type : File
    Data : ~dfedfb.tmp
    Category : Data Miner


    Having read all the previous is there a bug free copy of weather watcher?
    It really is a good programme,but for that>>
     
  17. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    The bug is not in Weather Watcher IMO, but in AdAware.
    Do you still have the backups from removing those files so I can send them in to Lavasoft?

    Regards,

    Pieter
     
  18. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    :)
    Hello again..Sorry I thought I had posted a reply but it doesnt appear to be here..You asked for log copy so here it is



    Deep scanning and examining files (C:)
    ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

    VX2.BetterInternet Object recognized!
    Type : File
    Data : ~df3c9d.tmp
    Category : Data Miner
    Comment :
    Object : C:\Documents and Settings\js\Local Settings\Temp\
    FileSize : 16 KB
    Created on : 20/09/2003 09:06:50
    Last accessed : 20/09/2003 10:51:26
    Last modified : 20/09/2003 09:06:50



    VX2.BetterInternet Object recognized!
    Type : File
    Data : ~df4be6.tmp
    Category : Data Miner
    Comment :
    Object : C:\Documents and Settings\j s\Local Settings\Temp\
    FileSize : 16 KB
    Created on : 20/09/2003 10:49:08
    Last accessed : 20/09/2003 10:49:08
    Last modified : 20/09/2003 10:49:08



    VX2.BetterInternet Object recognized!
    Type : File
    Data : ~dfc2ab.tmp
    Category : Data Miner
    Comment :
    Object : C:\Documents and Settings\js\Local Settings\Temp\
    FileSize : 16 KB
    Created on : 19/09/2003 20:13:25
    Last accessed : 20/09/2003 10:51:26
    Last modified : 19/09/2003 20:13:25


    Hope this is ok..
    Also if there is a copy of weather watcher that doesnt have the bug please let me know because it didnt have it when I first downloaded it,,it seemed to start after an update and apart from that it is a really good programme
     
  19. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    I have asked someone from Lavasoft to have a look.

    Regards,

    Pieter
     
  20. IAMSKINZ

    IAMSKINZ Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    9
    uksenior,

    Make sure that you are using the current Reference File # 01R221 20.09.2003 (I am sure you are).
    Please submit a copy of that file for evaluation.
    There is the new Submission Site with instructions and everything you will need to make this process quick and easy :eek:k:
    Please include your findings and a link to this thread.
    Thanks.

    Have fun........ :D
     
  21. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    ;)
    I have now submitted 2 logs to you..Installation and one with the vx2.betterinternet.tmp..
    Hope they are ok,,if not,,email me :D
     
  22. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Which reminds me that this turned out to be completely irrelevant in the SpywareBlaster forum.
    So moving it.

    Regards,

    Pieter
     
  23. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    Thankyou for your help Pieter..I hope you are now going to include vx2.betterinternet.tmp in spywareblaster includes as it is in adaware!!
     
  24. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,331
    Location:
    Netherlands
    Hi uksenior,

    I'm afraid you don't understand. There is nothing to add in SpywareBlaster since these where false alarms by AdAware.

    Regards,

    Pieter
     
  25. uksenior

    uksenior Registered Member

    Joined:
    Sep 21, 2003
    Posts:
    20
    Location:
    Nottingham,England
    Hello Pieter
    I think I did..I was just hoping spywareblaster could block them :blink:
    Oh well..will have to wait for lavasoft to fix it then before I put weather watcher back in. :'(
     
Loading...
Thread Status:
Not open for further replies.