2 replies to this topic

[roadrage]

First let me say I am glad that I was directed here to this site and found RogueRemover, at a site I moderate at someone had spymarshal installed and I googled high and low for a removal procedure and found nothing but to remove through Add Remove Programs so I did it that way, I was not sure that smitfraud was updated for it yet so is it correct in saying that spymarshal is a new rogue program just branched off another? anyway someone told me of RogueRemover and I must say I like the program and it did the job as far as I can tell, the thing is I did not see the rogue in HJT I saw it from the AVG log file. The scan they did is included with another I did not see in HJT (Uniblue\SpyEraser), what I need to know is were these files removed when they selected remove or will they still need to be deleted manually. I did have them run it again and select remove but they have not posted back yet. I hope this is in the right post if not could you move it to the correct place.
Thanxx.

Type: File
Vendor: SpyEraser
Location: C:\Program Files\Uniblue\SpyEraser\SpyEraser.dll

Type: File
Vendor: SpyEraser
Location: C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe

Type: File
Vendor: SpyEraser
Location: C:\Program Files\Uniblue\SpyEraser\XceedZip.dll

Type: File
Vendor: SpyEraser
Location: C:\Program Files\Uniblue\SpyEraser\zlibwapi.dll

Type: File
Vendor: SpyEraser
Location: C:\Documents and Settings\Roysta\Application Data\Uniblue\SpyEraser\config.dat

Type: Folder
Vendor: SpyEraser
Location: C:\Program Files\Uniblue\SpyEraser

Type: Folder
Vendor: SpyEraser
Location: C:\Documents and Settings\Roysta\Application Data\Uniblue\SpyEraser

Type: Registry Key
Vendor: Registry Booster
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Uniblue\System Care

Type: Registry Key
Vendor: SpyEraser
Location: HKEY_CURRENT_USER\Software\Uniblue\SpyEraser

Rogue Remover has found the objects above.

Just edited:
Is this a false positve SpyEraser, dummy me I just did a search and it is from http://www.liutilities.com/products/campaigns/plib/se/

[RubbeR DuckY]

SpyEraser was delisted a while back. Have them download RogueRemover from http://www.malwarebytes.org/rogueremover.php and install it. Then 'Check for updates' for the new database. SpyEraser may have been erased or may have not been erased, depending on when they saved the log.

[roadrage]

Thank you for the info RubbeR DuckY