BleepingComputer.com: Ssmgr.exe Problem

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Ssmgr.exe Problem Possible Infection with SSMGR.exe

#1 User is offline   snypa1 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 22-May 06

Posted 22 May 2006 - 09:15 AM

Hi everyone, I have a feeling that my system is infected with something. After downloading and installing IE7 (don't worry, im a born and bred Firefox user), Zone Alarm Internet Security Suite has been popping up whenever I want to type something in the URL bar, saying that it may want to monitor keyboard activity, could be a keytroke logger etc. I was denying this for several weeks, but then got tired of the messages then accidentally allowed it to run, and allowed it to run in future instances.

I was then configuring services and running processes, and came across "SSMGR.exe" which I hadnt noticed before. I did research on this, and found that its part of something called "007 Spy Software". This was very unusual, since I've very often taken precautions on spyware etc.

I posted some HijackThis logs on various sites and nothing malicious was found. However, I would be greatful if i could be given more nformation on this process, and whether IE7 was the cause of it. I never installed anything dodgy, and nothing has been found on several scans using various antispyware applications.

Any help is greatly appreciated.

#2 User is offline   buddy215 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 4,590
  • Joined: 14-April 06
  • Gender:Male
  • Location:West Tennessee

Posted 22 May 2006 - 09:40 AM

www.symantec.ca/avcenter/venc/data/spyware.sa_pcspy.html

This is what Symantec says about this spyware.

#3 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 22 May 2006 - 11:07 AM

Quote

007 Spy Software - "stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"

http://www.bleepingcomputer.com/startups/ssmgr.exe-6756.html

If your running Win XP/2000, download and scan with Ewido Anti-Malware v3.5 in "SAFE MODE".
Ewido Install and Scan Instructions.

Follow Symantec's manual removal instructions found here. This involves making changes in the registry. Always back up your registry before making any changes.

When done, perform these online Virus scans:
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]
Trend Micro Housecall Scan
Panda ActiveScan [ActiveScan Panda does not remove adware/spyware but will autoclean for viruses & worms.]
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#4 User is offline   briank777 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 22-May 06

Posted 22 May 2006 - 11:31 AM

my suggestion is go to www.majorgeeks.com and to the left of the homepage is all the programs to pick through. go to anti virus the go to avg free version, this is the best anti virus today on the net by far

#5 User is offline   snypa1 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 22-May 06

Posted 22 May 2006 - 12:59 PM

Thanks to all 3 of you, very helpeful and offered very fat responses. Im going to go to the links provided, and I'll check back.

#6 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 22 May 2006 - 01:10 PM

I found this 007 Spy Software shareware program listed at MajorGeeks a few minutes ago. So the first thing to try is to go to Start > Settings > Control Panel > Add or Remove Programs, highlight 007 Spy Software and select remove if present.

Then do the scans and delete any files/ registry entries that remain as per the removal instructions.

This post has been edited by quietman7: 22 May 2006 - 01:11 PM

Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

#7 User is offline   snypa1 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 3
  • Joined: 22-May 06

Posted 23 May 2006 - 05:20 PM

Thanks everyone for the help and replies, but it seems, after lengthy scanning and using a range of detection tools, im not infected. I dont know what it was but after I ended that process, it never came back, and using the links provided, I never came across any of the files that should have been present if i was infected. Thanks for the help.

Strange though, maybe it was in the midst of installing when I noticed it and ended it?

#8 User is offline   quietman7 

  • Bleepin' Janitor
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 25,518
  • Joined: 09-July 05
  • Gender:Male
  • Location:Virginia, USA

Posted 23 May 2006 - 05:28 PM

Your welcome. Glad to hear you resolved the problem.
Microsoft MVP - Consumer Security 2007-2012 Posted Image
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users