Hi everyone, I have a feeling that my system is infected with something. After downloading and installing IE7 (don't worry, im a born and bred Firefox user), Zone Alarm Internet Security Suite has been popping up whenever I want to type something in the URL bar, saying that it may want to monitor keyboard activity, could be a keytroke logger etc. I was denying this for several weeks, but then got tired of the messages then accidentally allowed it to run, and allowed it to run in future instances.
I was then configuring services and running processes, and came across "SSMGR.exe" which I hadnt noticed before. I did research on this, and found that its part of something called "007 Spy Software". This was very unusual, since I've very often taken precautions on spyware etc.
I posted some HijackThis logs on various sites and nothing malicious was found. However, I would be greatful if i could be given more nformation on this process, and whether IE7 was the cause of it. I never installed anything dodgy, and nothing has been found on several scans using various antispyware applications.
Any help is greatly appreciated.
Page 1 of 1
Ssmgr.exe Problem Possible Infection with SSMGR.exe
#2
Posted 22 May 2006 - 09:40 AM
www.symantec.ca/avcenter/venc/data/spyware.sa_pcspy.html
This is what Symantec says about this spyware.
This is what Symantec says about this spyware.
#3
Posted 22 May 2006 - 11:07 AM
Quote
007 Spy Software - "stealthy monitoring program which allows you to secretly track all activities of computer users and automatically deliver logs to you via Email or FTP"
http://www.bleepingcomputer.com/startups/ssmgr.exe-6756.html
If your running Win XP/2000, download and scan with Ewido Anti-Malware v3.5 in "SAFE MODE".
Ewido Install and Scan Instructions.
Follow Symantec's manual removal instructions found here. This involves making changes in the registry. Always back up your registry before making any changes.
When done, perform these online Virus scans:
[Watch the Address bar in IE. You may receive alerts that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component.]
Trend Micro Housecall Scan
Panda ActiveScan [ActiveScan Panda does not remove adware/spyware but will autoclean for viruses & worms.]
Microsoft MVP - Consumer Security 2007-2012 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Member of UNITE, Unified Network of Instructors and Trusted Eliminators
#4
Posted 22 May 2006 - 11:31 AM
my suggestion is go to www.majorgeeks.com and to the left of the homepage is all the programs to pick through. go to anti virus the go to avg free version, this is the best anti virus today on the net by far
#5
Posted 22 May 2006 - 12:59 PM
Thanks to all 3 of you, very helpeful and offered very fat responses. Im going to go to the links provided, and I'll check back.
#6
Posted 22 May 2006 - 01:10 PM
I found this 007 Spy Software shareware program listed at MajorGeeks a few minutes ago. So the first thing to try is to go to Start > Settings > Control Panel > Add or Remove Programs, highlight 007 Spy Software and select remove if present.
Then do the scans and delete any files/ registry entries that remain as per the removal instructions.
Then do the scans and delete any files/ registry entries that remain as per the removal instructions.
This post has been edited by quietman7: 22 May 2006 - 01:11 PM
Microsoft MVP - Consumer Security 2007-2012 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

Member of UNITE, Unified Network of Instructors and Trusted Eliminators
#7
Posted 23 May 2006 - 05:20 PM
Thanks everyone for the help and replies, but it seems, after lengthy scanning and using a range of detection tools, im not infected. I dont know what it was but after I ended that process, it never came back, and using the links provided, I never came across any of the files that should have been present if i was infected. Thanks for the help.
Strange though, maybe it was in the midst of installing when I noticed it and ended it?
Strange though, maybe it was in the midst of installing when I noticed it and ended it?
Share this topic:
Page 1 of 1

Help

Back to top









