[soarwitheagles]

Hi everyone!

Well, I made the mistake of downloading a program that promised free bowling software and apparently it is a form of malware.

I am deeply concerned because when I did a little research, it appears to be a program that has the ability to take my system over and cause much havoc.

Please, can anyone help me to effectively get rid of this program? [I have just spent literally 2 weeks of building and fine tuning my new build and then I downloaded the wrong program.

Here is what the only website I found says about it:

The filename INSTALLER_SHOPPERREPORTS.EXE was first seen on Dec 16 2007 in The UNITED STATES.
The filename INSTALLER_SHOPPERREPORTS.EXE refers to an executable program. It has file size of 741,384 bytes. This file has no vendor, product or version information specified in the file header.

INSTALLER_SHOPPERREPORTS.EXE has been seen to perform the following behavior(s):

* This Process Creates Other Processes On Disk
* Adds Products to the system registry
* Enables an In Process Object/Server - Common with DLL Injections
* Creation and Registration of a Browser Helper Object in Internet Explorer
* Creates new file extentions so that Internet Explorer will automatically open and potentially execute additional file types
* Can communicate with other computer systems using HTTP protocols
* This Process Deletes Other Processes From Disk


Please, if anyone can help me, please do so.

It is me, Freddy

[Mak213]

http://www.tech-forums.net/pc/f51/sp...osiris-165828/

Go thru Osiris's Guide and post a log in the Analyze area.

[soarwitheagles]

Hi everyone!

It is me, Freddy. I found a site on google after typing in a search for free bowling. The site promised to help me to download and install free software that would let me bowl for free.

I am almost certain it is malware. My Panda Antivirus says my computer is infected with it, but only gives a notification, not disinfection or removal.

Please, can anyone help me. I believe this is a serious threat to my system. Panda labels it as such:[Installer_shopperreports.exe]

Then it gives really strange symbols after this installer info.

I believe this is a hijacking program...

When I went online, I found this information about this malware program:

The filename INSTALLER_SHOPPERREPORTS.EXE was first seen on Dec 16 2007 in The UNITED STATES.
The filename INSTALLER_SHOPPERREPORTS.EXE refers to an executable program. It has file size of 741,384 bytes. This file has no vendor, product or version information specified in the file header.

INSTALLER_SHOPPERREPORTS.EXE has been seen to perform the following behavior(s):

* This Process Creates Other Processes On Disk
* Adds Products to the system registry
* Enables an In Process Object/Server - Common with DLL Injections
* Creation and Registration of a Browser Helper Object in Internet Explorer
* Creates new file extentions so that Internet Explorer will automatically open and potentially execute additional file types
* Can communicate with other computer systems using HTTP protocols
* This Process Deletes Other Processes From Disk

INSTALLER_SHOPPERREPORTS.EXE has been the subject of the following behavior(s):

* Created as a process on disk
* Executed from Temporary Folders
* Executed as a Process
* Deleted as a process from disk
* Writes to another Process's Virtual Memory (Process Hijacking)

So, I am desperate for help on this issue.

Please, I am pleading with anyone with knowledge on this issue to please help me.

Thank you,

Freddy

[soarwitheagles]

Hi again Mak!

Thanks again for all your assistance in building my second rig here...it really has worked well.

I clicked on the guide, but now my downloader has the save or open part grayed out and I cannot access it.

Have you any other ideas for me please?

Thanks,

Freddy

[soarwitheagles]

Originally Posted by soarwitheagles

Hi again Mak!

Thanks again for all your assistance in building my second rig here...it really has worked well.

I clicked on the guide, but now my downloader has the save or open part grayed out and I cannot access it.

Have you any other ideas for me please?

Thanks,

Freddy

Actually, the OK Button on my download window is grayed out and thus, I am unable to save or open it.

Can you help me?

Freddy

[soarwitheagles]

Originally Posted by soarwitheagles

Actually, the OK Button on my download window is grayed out and thus, I am unable to save or open it.

Can you help me?

Freddy

I just noticed in the Panda Scan window the following message: Malicious software found!

I think I am in BIG TROUBLE.

Can anyone help me please?

Freddy

[soarwitheagles]

Originally Posted by soarwitheagles

I just noticed in the Panda Scan window the following message: Malicious software found!

I think I am in BIG TROUBLE.

Can anyone help me please?

Freddy

Mak and Os,

Ok, I was finally able to download your guide. I read it and will begin the process tomorrow!

Thanks again!

Freddy

[Mak213]

Alright lets see what we can do here. First google for and download:

HiJack This 2.0
Smitfraudfix
Vundofix
CCleaner
Cleanup! 4.5
MSConfig Cleanup
Trojan Remover

Also what AV are you runing? Panda? Might want to remove that and use Avast or AVG. The guide recommends AVG.

Install and update all apps. then run them in this order:

Smitfraudfix
Vundofix
CCleaner
Cleanup!
AVG
Trojan Remover

After all that run HiJack This 2.0 and post your log.

[soarwitheagles]

Originally Posted by Makaveli213

Alright lets see what we can do here. First google for and download:

HiJack This 2.0
Smitfraudfix
Vundofix
CCleaner
Cleanup! 4.5
MSConfig Cleanup
Trojan Remover

Also what AV are you runing? Panda? Might want to remove that and use Avast or AVG. The guide recommends AVG.

Install and update all apps. then run them in this order:

Smitfraudfix
Vundofix
CCleaner
Cleanup!
AVG
Trojan Remover

After all that run HiJack This 2.0 and post your log.

Ok Mak,

I am just about finished downloading each of the programs you have listed. I will update them tomorrow and then run in the exact order you have listed. I also copied the each of the tutorials and will do my best to read and understand each program before I run them.

Sure hope this works....I have spend literally days upon days building and then installing all my programs. This was such a foolish mistake on my part.

I really appreciate you and the help you give.

Freddy

[soarwitheagles]

Mak,

One more question. When I began to install the first program [smithfraudfix], then my Panda Antivirus is blocking it. At which point shall I uninstall Panda?

I am a bit concerned about uninstalling it now because if I must update each program, perhaps my computer will become more vulnerable....

Have you any advice on this? Should I merely temporarily disable Panda as I install each program?

Please let me know your suggestions...

Thanks,

Freddy