Bargain Buddy

[simpo two]

I can't shift it. I've used AVG Grisoft, AdAware, HiJack This and CW Shredder. I've even gone into the registry and deleted the Bargain Buddy folder.

Something called dosxpd.exe is trying to get out through ZoneAlarm but there's nothing on Google about it.

Any ideas?

[beano500]

What OS?

[simpo two]

XP. In the ZoneAlarm programs list I've also found 'Download Module' which relates to exdl1.exe.

I think I've managed to uninstall the folder - you have to ask silly questions to do so - but I'm not convinced it's gone.

[Plotloss]

Spybot Search & Destroy

[simpo two]

Plotloss said:

Spybot Search & Destroy

Thanks Plotloss - I did start running it but it was so desperately slow I bailed out. Will try again over lunch.

NB Found a Temp folder on my C drive with Bargain Buddy and some of his mates in it, grinning at me. Deleted folder.

[Plotloss]

Deleting stuff probably wont help, it'll get recreated at some point usually start up.

Spybot and AdAware I find sort everything.

The new MS one is supposed to be pretty good but those two are the leaders as far as I am concerned.

[simpo two]

Now I seem to have LuComServer... which looks like my old Norton update thing and is in the Symantec folder, but can't be deleted.
The only reference I can find to LuComServer (don't go to the homepage!) is www.paretologic.com/xoftspy/lp/14/
Anyone know if this is safe to use?
Sorry if I appear to be a muppet!

[Plotloss]

Just been to that website and it didnt trigger any of the corporate virus guard things on the firewall so I assume its perfectly safe.

Did S&D not help?

[BliarOut]

Try booting into safe mode and then running spybot. A lot of this stuff creates two running processes that monitor each other. When you get rid of one, the other puts it back

[simpo two]

Update: in my enthusiasm to remove spyware I evidently deleted something important... when I fired it up again, there was no familiar desktop, just a black screen and a 30 minute boot-up to nowhere.

I've just reinstalled XP (yes, all by myself ) and apart from Grisoft needing a reinstall, all seems OK again.

Phew.

Thanks for all your suggestions guys; nice to have some experts nearby.

Edited to add: aha - just got a Grisoft virus alert - a dialler - couldn't do anything except 'continue'. Then the ZA alert went up and on checking the Programs List, 'dosxpd.exe' had appeared. This doesn't seem to be on Google!

Thoughts? SpyBot didn't shift it.

>> Edited by simpo two on Thursday 10th March 13:35

[simpo two]

Following Plotloss's OK, I went to Pareto Logic and downloaded their software. The scan found 43 assorted nasties that the othes had missed - Bargain Buddy, CoolWebSearch, you name it. Except when you click Remove, you have to go and buy the product; $39.99. Arse. Anyway, I was so pleased with the haul of syware that I actually bought it (!!).

[cuneus]

AKA spyware in a box, tends to find things in the trial version that do not exist

I wonder why

[simpo two]

cuneus said:

AKA spyware in a box, tends to find things in the trial version that do not exist I wonder why

That thought did cross my cynical mind - but the stuff it 'found' tallied with what I'd been having trouble with, so I was inclined to believe it.
Have been on for couple of hours now since reboot and no sign of anything untoward.

[simpo two]

Latest - just discovered from a chum that Lavasoft discontinued version 6 at Christmas. But they didn't tell me :banghead. So I've downloaded the SE version and that found another bagful of nasties... gentlemen, I think we're getting there!

[slinky]

I know it's already been mentioned, but try MS Anti Spyware as well... it's free and appears to be damn good in all the applications I've applied it in so far..

slinky