Has anyone seen this? I can't find anything on google/groups, none of my co-workers have seen this and none of our usual recommended spy-ware tools from here are finding this! I boot into safe mode and remove the registry keys and exe file, but after a reboot it is somehow repropogated and back in the startup! It doesn't do any browser hijacking, just random popups. This thing is damned annoying, and until it gets removed from a client's computer, I get phone calls every time there is a popup! If anyone could help out that would be MUCH appreciated.
What steps have you ran all ready? ...Please be a little more clear on the question.
Quote originally posted by i686-linux ...
I can't find anything on google/groups, none of my co-workers have seen this and none of our usual recommended spy-ware tools from here are finding this! I boot into safe mode and remove the registry keys and exe file, but after a reboot it is somehow repropogated and back in the startup!
("our usual recommended spy-ware tools from here" means the same tools that we always tell people here at daniweb to use.)
In other words...
I ran AdAware, SpyBot, and Hijack-this with no results of anything pertaining to spamremote.exe (And yes all of these were up to date) There were a few things related to SahAgent, but those were removed by adaware, and have been gone for days.
After those programs found nothing I booted into safe mode to delete the spamremote.exe file on the HD as well as the registry keys that were causing it to startup, checked msconfig as well. No records of it in the startup. Cool? No... it repropogates itself somehow from a secondary binary elsewhere on the computer.
Other resources I have checked are google/groups.google and co-workers.
Quote originally posted by MAD_DOG ...
Your saying in IE your getting ramdom pop-ups?
Quote originally posted by i686-linux ...
It doesn't do any browser hijacking, just random popups.
I didn't mention IE. What I am saying is that it does random popups. Whether IE is loaded or not. Hence, random.
No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Unsolved 
