Jump to content
Ghost Recon.net Forums
Sign in to follow this  
WytchDokta

Is this spyware or not?

Recommended Posts

I've just done another registry search (in regedit) and it still cannot find those files (I think we can say I have successfully deleted the files). I've even logged in as the other user of my rig and searched using regedit, no PCAgent malware files there either. AS programs are still saying the files are there. I can run a registry search straight after and regedit still says those files aren't there (despite whether it's before or after the AS scan). And it's the same original file in the same HK Local Machine directory from the very first scan that is being detected. That original PCAgent file, the HKLM directory it was in, the infected restore point #333 file and Paltalk file were deleted manually by me yesterday, and according to regedit, have NOT come back since my manual deletion of the files. So maybe there's a problem with the Trend Micro AS software. It was a trial version afterall.

One of the files turned up by my original registry seach for the offending file, RP333, was a restore point. That's gone. Deleted all those last night.

So is it safe to say the malare is deleted (regedit is not finding the files since I manually delted them).

@ GreyHaired, I've done the restore point thing already.

@ WK, I already had hidden folders and files enabled prioir to this incident. Although, I have noticed that if I enable to show system files/folders, the System Restore folder says access denied.

Edited by WytchDokta

Share this post


Link to post
Share on other sites

What you been messing around with this time then WD?..

Some Key generator?..

Recieving things from dodgy people looks like it :shifty:

Although I have never had problems with those .....

Looks like you had alot to suffer with ..

glad you got it sorted pyrate boyo! har har !

:thumbsup:

Share this post


Link to post
Share on other sites

Dunno if it's 100% sorted yet, gonna go check it all out in safe mode in a mo'.

Key generators....? What's one of those? :whistle:

Share this post


Link to post
Share on other sites
Spyware_KEYL_PCAgent.40

That thing there :rolleyes: ^

That looks like its from a keygen app

:thumbsup:

Edited by GooseBumps

Share this post


Link to post
Share on other sites

coz it registers software, with a keygen with a name add etc.... and i think the keygen gets the key to upload somewhat data somehow..

Then the registered key'(s) go to the database to whoever made the keygen or software (viceersa)...

This is what is going on in your "SPYWARE" in my theory WD ... :o

Those files should be erased

Spyware_KEYL_PCAgent.40
& whatever other ones you got ...

:thumbsup:

Share this post


Link to post
Share on other sites

I JUST FOUND TWO REGISTRY KEYS IN MY DOCUMENTS FOLDER.

I didn't put the reg keys there. Mentions all stuff I've installed and removed in those keys. When I click on them, it comes up "install to registry?" etc I clicked no.

I'm checking them out in Notepad, one of them is blank.

Should I delete them?

Share this post


Link to post
Share on other sites
I JUST FOUND TWO REGISTRY KEYS IN MY DOCUMENTS FOLDER.

I didn't put the reg keys there. Mentions all stuff I've installed and removed in those keys. When I click on them, it comes up "install to registry?" etc I clicked no.

I'm checking them out in Notepad, one of them is blank.

Should I delete them?

If they are blanks erase them .... All the stuff you installed before, I'm not sure so i wont tell you to remove them ...

Share this post


Link to post
Share on other sites

Just ran Ewido. It picked up threats I didn't know I had on there (other AS and AV programs didn't detect those threats). Ewido didn't not detect PCAgent.40 (but I think it would have if PCAgent.40 was still on there, so my rig must be free from PCAgent.40 now (it's still not in registry).

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×