Removing a Spyware program

I downloaded AdwareAlert and ran it. It has some problems and will not run
correctly. I have been trying to remove it, but it stops everytime at the
following: "Cannot stop antispyfilter" open service, access is denied.
Adware personnel are of little or no use. They have sent me a cmd program
that does not work. I have attempted to use the cmd function "sc stop
antispyfilter", but it comes back with, "open service, failed 5: access is
denied".

Hi

"Capt P. F. Voshell" <Capt P. F. > wrote in
message news:5077E5F1-0C3A-45F0-BF60-...
>I downloaded AdwareAlert and ran it. It has some problems and will not run
> correctly. I have been trying to remove it, but it stops everytime at the
> following: "Cannot stop antispyfilter" open service, access is denied.
> Adware personnel are of little or no use. They have sent me a cmd program
> that does not work. I have attempted to use the cmd function "sc stop
> antispyfilter", but it comes back with, "open service, failed 5: access is
> denied".

Did you run the cmd function as administrator ?

Capt P. F. Voshell wrote:
> I downloaded AdwareAlert and ran it. It has some problems and will not run
> correctly. I have been trying to remove it, but it stops everytime at the
> following: "Cannot stop antispyfilter" open service, access is denied.
> Adware personnel are of little or no use. They have sent me a cmd program
> that does not work. I have attempted to use the cmd function "sc stop
> antispyfilter", but it comes back with, "open service, failed 5: access is
> denied".

You are infected with some version of the Virtumonde trojan which you
got when you downloaded and installed a rogue antispyware program.

Because you have Vista, not all removal tools/techniques will work for
you. A better solution is for you to go to one of the specialty forums
listed below (in no particular order) to get guided expert help.

http://aumha.org/downloads/hijackthis.zip
http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/foru...howtutorial=42 -
another tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement
and the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.geekstogo.com/forum/Malwa..._Here-f37.html

And for future reference, Safe Hex:

http://www.wilderssecurity.com/showthread.php?t=27971 - So How Did I Get
Infected Anyway?
http://www.getsafeonline.org/
http://wiki.castlecops.com/Malware_R...:_Introduction
http://www.claymania.com/safe-hex.html
http://www.aumha.org/a/parasite.htm - The Parasite Fight
http://msmvps.com/blogs/harrywaldron.../05/82584.aspx - MVP
Harry Waldron - The Family PC - How to stay safe on the Internet
http://www.spywarewarrior.com/rogue_anti-spyware.htm - Eric Howes on
Rogue Antispyware Programs


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

I should be at administrator level. I don't know how to change it from
(c:\users\phil)

"Thanatos" wrote:

> Hi
>
> "Capt P. F. Voshell" <Capt P. F. > wrote in
> message news:5077E5F1-0C3A-45F0-BF60-...
> >I downloaded AdwareAlert and ran it. It has some problems and will not run
> > correctly. I have been trying to remove it, but it stops everytime at the
> > following: "Cannot stop antispyfilter" open service, access is denied.
> > Adware personnel are of little or no use. They have sent me a cmd program
> > that does not work. I have attempted to use the cmd function "sc stop
> > antispyfilter", but it comes back with, "open service, failed 5: access is
> > denied".
>
> Did you run the cmd function as administrator ?
>
>
>
>
>

Even if you have an administrator account, you don't any more power than a
normal user.

To run the program, first open a cmd window, with elevated authority.
Start - All Programs - Accessories
right-click on Command Prompt, select "Run as Administrator"

now run the command they told you to.


"Capt P. F. Voshell" <> wrote in
message news:50522ACA-F1AE-4DC8-9C27-...
> I should be at administrator level. I don't know how to change it from
> (c:\users\phil)
>
> "Thanatos" wrote:
>
>> Hi
>>
>> "Capt P. F. Voshell" <Capt P. F. > wrote
>> in
>> message news:5077E5F1-0C3A-45F0-BF60-...
>> >I downloaded AdwareAlert and ran it. It has some problems and will not
>> >run
>> > correctly. I have been trying to remove it, but it stops everytime at
>> > the
>> > following: "Cannot stop antispyfilter" open service, access is denied.
>> > Adware personnel are of little or no use. They have sent me a cmd
>> > program
>> > that does not work. I have attempted to use the cmd function "sc stop
>> > antispyfilter", but it comes back with, "open service, failed 5: access
>> > is
>> > denied".
>>
>> Did you run the cmd function as administrator ?
>>
>>
>>
>>
>>

I think Malke hit it on the head.
I was able to remove antispyfilter by booting in protected w/o drivers.
After take, I removed the program with ms removal.
I still think I have some sort of application (Virtumondo), but as to yet
have not been able to identify and find.
Thanks for your help.


"Dave" wrote:

> Even if you have an administrator account, you don't any more power than a
> normal user.
>
> To run the program, first open a cmd window, with elevated authority.
> Start - All Programs - Accessories
> right-click on Command Prompt, select "Run as Administrator"
>
> now run the command they told you to.
>
>
> "Capt P. F. Voshell" <> wrote in
> message news:50522ACA-F1AE-4DC8-9C27-...
> > I should be at administrator level. I don't know how to change it from
> > (c:\users\phil)
> >
> > "Thanatos" wrote:
> >
> >> Hi
> >>
> >> "Capt P. F. Voshell" <Capt P. F. > wrote
> >> in
> >> message news:5077E5F1-0C3A-45F0-BF60-...
> >> >I downloaded AdwareAlert and ran it. It has some problems and will not
> >> >run
> >> > correctly. I have been trying to remove it, but it stops everytime at
> >> > the
> >> > following: "Cannot stop antispyfilter" open service, access is denied.
> >> > Adware personnel are of little or no use. They have sent me a cmd
> >> > program
> >> > that does not work. I have attempted to use the cmd function "sc stop
> >> > antispyfilter", but it comes back with, "open service, failed 5: access
> >> > is
> >> > denied".
> >>
> >> Did you run the cmd function as administrator ?
> >>
> >>
> >>
> >>
> >>
>