Infected with: SpywareSoftStop.exe????

Discussion in 'malware problems & news' started by mswings, Jun 13, 2007.

Thread Status:
Not open for further replies.
  1. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    Has anyone been infected with this?

    I have deleted it a hundred times, from the control panel and is still in thereo_O

    HELP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    mswings
     
  2. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Counterspy and SuperAntispyware both have descriptions of it. Why not download the free version of SuperAntispyware and run a scan?
     
  3. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    I did as you suggested, NOTHING removes it.

    I paid to get the " Rogue Remover" NOTHING !!!

    Even tried the "Belarc Advisor" - NOTHING !!!!!!!!!!!

    I am at my wits end.

    mswings
     
  4. fred128

    fred128 Registered Member

    Joined:
    May 21, 2006
    Posts:
    152
    It's rogue security program. Have you tried to simply uninstall it?

    SpywareSoftStop
    Type Misc

    Type Description Miscellaneous threats include applications that do not fit into other categories or that fall into multiple categories. Miscellaneous threats typically include some form of potentially objectionable functionality that may pose privacy or security risks to users and their PCs.
    Category
    Rogue Security Program

    Category Description
    A Rogue Security Program is software that purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results. Rogue Security Programs typically use aggressive, deceptive advertising and may be installed without adequate notice and consent, often through exploits.
    Level Elevated
    Level Description Elevated risks are typically installed without adequate notice and consent, and may make unwanted changes to your system, such as reconfiguring your browser's homepage and search settings. These risks may install advertising-related add-ons, including toolbars and search bars, or insert advertising-related components into the Winsock Layered Service Provider chain. These new add-ons and components may block or redirect your preferred network connections, and can negatively impact your computer's performance and stability. Elevated risks may also collect, transmit, and share potentially sensitive data without adequate notice and consent.

    Advice Type Remove

    Description SpywareSoftStop is a purported anti-spyware application to scan for and remove spyware from users' computers.

    Add. Description SpywareSoftStop installs junk files that it then detects and falsely displays as spyware in the scan results presumably to frighten the user into paying for the application. SpywareSoftStop will not remove any reported spyware without purchase of the of the program. It is known to be marketed by aggressive and deceptive advertising.
    Author Spyware Soft Stop

    Author Description "Spyware Soft Stop an award-winning spyware removal utility will help you fight all kinds of spyware and adware including keyloggers, trojan viruses, password thieves and so on With the new and unique protection module once cleaned your machine will not get infected ever again."
    Author URL spywaresoftstop.com
    File Traces
    %PROGRAM_FILES%\ spyware soft stop\ gpkcsp.dll
    %PROGRAM_FILES%\ spyware soft stop\ httpapi.dll
    %PROGRAM_FILES%\ spyware soft stop\ htui.dll
    %PROGRAM_FILES%\ spyware soft stop\ spyware soft stop.exe
    %PROGRAM_FILES%\ spywaresoftstop\ spywaresoftstop.exe
    %PROGRAM_FILES%\ spywaresoftstop\ spywaresoftstopupdate.exe
    111.exe
    c:\ sss_bot.exe
    setup.exe
    sss_bot.exe
    sss_setup.exe
     
  5. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    I haven't heard of that form of spyware before, but here are links discussing the infection.

    http://www.myantispyware.com/2006/05/07/how-to-remove-spyware-soft-stop/

    http://www.symantec.com/security_response/print_writeup.jsp?docid=2006-042411-2848-99

    http://research.sunbelt-software.com/threatdisplay.aspx?name=SpywareSoftStop&threatid=44279

    If you should decide to tweak the registry, I would first post your Hijackthis log in another help forum like spywareinfo or castlecops to see what the tech support there can find.
     
  6. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
  7. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    Thanks Fred, I did try to remove it about 100 times.
    No luck.

    I have downloaded everything that was suggested, but, still - this dumb thing is still on my computer.

    I am perplexed!!!!!!!!!!!!!!!!:oops:

    I just bought a new computer; have NOD32 as my anti-virus program.
    They have sent emails to help. some of the things, I do not know how to do.

    mswings
     
  8. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,095
    Location:
    Mountaineer Country
  9. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,741
    Location:
    New York City
    After doing some research, go the windows\system32 folder. Rename file notifysb.dll to crapnotify.jpg. Restart Windows. If spyware is gone, boot into Safe Mode and remove file windows\system32\crapnotify.jpg.

    Follow instructions in post #4 to repair Windows XP in this thread:
    https://www.wilderssecurity.com/showthread.php?t=176757
     
  10. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    HOO-RAH !!!!!!!!!!!!!!!!!!!!!!

    I did ALL the scans in Safe Mode - and it is GONE !!!!!!!!!!!

    Thank you amiilion, to ALL who helped me with this problem.

    God Bless,
    mswings
     
  11. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,095
    Location:
    Mountaineer Country
    Good to hear it's gone :) Safe mode is good to remove nasties once there found.

    Cheers, innerpeace
     
  12. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    I wanted to take a few minutes, to thank everyone who helped me.

    It sure is great, knowing that you are all out there to help.

    You are ALL the BEST.


    mswings:-* :-*
     
  13. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    Plllleeeeazzze, don't do that. My wife will be wondering where the lipstick came from. LOL ;)
     
  14. mswings

    mswings Registered Member

    Joined:
    Jun 13, 2007
    Posts:
    6
    Location:
    New Jersey, USA
    AWE !!!!!!!!!!!!!!!!

    You made my day.

    Have a great week-end.

    mswings
     
Loading...
Thread Status:
Not open for further replies.