Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Just Bought Ie Defender


  • Please log in to reply
11 replies to this topic

#1 pocho

pocho

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 17 November 2007 - 01:17 PM

So, I tried to view a video, got a virus thing called Zlob-X.a (something or other). It said that I needed to download an antispyware program. (It didn't say which one) So I ran a scan on my Norton 360. Nothing came up. Said I was free from viruses, spyware, and tracking cookies. I didn't know what to do. So I typed in Live Search"anti spyware". The first link was to a site called IE Defender. I thought "What the hell, let's see if the scanner will work. " Sure enough, it did. It said I had the Zlob thing. In order for it to be removed I had to download the IE Defender (6 month membership for $38). I download the IE Defender, ran the scan one more time, it finds Zlob. Then it erases it. (Magically my internet is running a lot faster than it has in previous weeks. It was kind of a nice surprise)

Problem.... I decided, just today, to see if anybody had some things to say about it. Boy did they. Its a rogue, its malware, its everything you don't want.

Question... What am I supposed to do? I just sent them an e-mail saying I want to cancel. I checked my statement online and it was like I have yet to be charged, but it charged me the second I downloaded the program.

Tell me, what am I supposed to do?

Thanks

Also, this is the site **** At the bottom, if you notice, it says that "IE Defender - tested and found to be safe to install."

Mod Edit: Removed Site address to preclude possible infection. ~TMacK

Edited by TMacK, 17 November 2007 - 01:33 PM.


BC AdBot (Login to Remove)

 


#2 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:11:52 PM

Posted 17 November 2007 - 01:29 PM

Hello pocho,

Follow these instructions on How To Remove Ie Defender .

You may want to contact your credit card company, and see if there is anything they can do about a 'stop payment'.
But I do think it's a case of Buyer Beware.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#3 Guest_Trudy2_*

Guest_Trudy2_*

  • Guests
  • OFFLINE
  •  

Posted 17 November 2007 - 01:33 PM

I too had this problem, last week. I got a download of SPYHUNTER & aleady had norton. My norton scan also said all clear. Between the two of them. I got rid of it---I thought. Norton reported I had a parasite---Guess what it was. Right on. Notrton remoed it. As for the money part, all you can do is try to contact them again. Trudy2

#4 pocho

pocho
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  

Posted 18 November 2007 - 12:59 PM

So I got a reply form them and they said that I should be getting a refund. Also, it's from a company called "File Depot"? It's starting to make me think that it was legit? Is it still bad? the ie defender thing? I would assume it is from all the things that have been said about it.

Thanks for the info y'all

#5 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:52 AM

Posted 18 November 2007 - 02:00 PM

That is a criminal enterprise you are dealing with. I assume you used a credit card to purchase the program. If it was me,
I would dispute the charges and cancel the card. If you haven't contacted the card company, don't be surprised to find a bunch of other added charges. I would also be very reluctant to click on any links in email they send you. My two cents.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#6 pocho

pocho
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:01:52 AM

Posted 18 November 2007 - 03:44 PM

That is a criminal enterprise you are dealing with. I assume you used a credit card to purchase the program. If it was me,
I would dispute the charges and cancel the card. If you haven't contacted the card company, don't be surprised to find a bunch of other added charges. I would also be very reluctant to click on any links in email they send you. My two cents.


Crap. I used my debit card. I'll keep a look out. Thanks for the tip. If something happens, what should I do?

#7 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:02:52 AM

Posted 18 November 2007 - 03:56 PM

Since you used your debit card, alert the bank and have them put a stop payment on the transaction.
Provide all the details to the bank that you can, so perhaps they can watch for suspicious transactions surrounding your account.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,592 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:52 PM

Posted 18 November 2007 - 04:00 PM

How to report ID theft, fraud, drive-by installs, hijacking and malware
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:52 AM

Posted 18 November 2007 - 05:04 PM

Since it is Sunday, try to find an emergency phone number for your bank. You could also visit their ATM and check your balance.
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#10 pocho

pocho
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:01:52 AM

Posted 20 November 2007 - 02:16 PM

Well, I'm pissed. I just checked my statement and they charged me the freakin $38. When they said it was going to be refunded.

BTW. I went through the instructions on deleting IE Defender and I got stuck on the files you're supposed to delete.
These:
C:\Windows\System32\bDivX.dll
C:\Windows\System32\bDivX.dll.bak
C:\WINDOWS\system32\IR9V0_QCX.dll
C:\WINDOWS\system32\IR9V0_QCX.dll.bak
C:\Windows\System32\Video32.dll
C:\Windows\System32\Video32.dll.bak
C:\WINDOWS\system32\IntelVideo.dll
C:\WINDOWS\system32\IntelVideo.dll.bak
C:\WINDOWS\system32\IntelVideoDivX.dll
C:\WINDOWS\system32\IntelVideoDivX.dll.bak
C:\WINDOWS\system32\XunLeiBHO_Now.dll
C:\WINDOWS\system32\XunLeiBHO_Now.dll.bak
C:\Windows\System32\dx50codec.dll
C:\Windows\System32\dx50codec.dll.bak
C:\Windows\System32\a3gpcodec.dll
C:\Windows\System32\a3gpcodec.dll.bak
C:\WINDOWS\system32\aDivX.dll
C:\WINDOWS\system32\aDivX.dll.bak
C:\WINDOWS\system32\mp3avi.dll
C:\WINDOWS\system32\mp3avi.dll.bak
C:\Windows\System32\VideoMP3.dll
C:\Windows\System32\VideoMP3.dll.bak
C:\Windows\System32\PowerVideo.dll
C:\Windows\System32\PowerVideo.dll.bak


Where are they? I searched for them and cant find any of them. Help, please.

Thanks

EDIT: I went into the panda site and clicked the check now button and it wouldn't work. What's up with that?

Edited by pocho, 20 November 2007 - 02:31 PM.


#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,592 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:52 AM

Posted 20 November 2007 - 02:30 PM

The self-help guide shows the Hijackthis entries and files commonly associated with this malware. However, some of them they may not always be present especially if you already have used any anti-malware removal or specialized fix tools. The files are listed so you can check your system to see if they are still present after following the posted instructions. If any are present, then the guide instructs you on how to remove them.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 buddy215

buddy215

  • Moderator
  • 13,255 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:02:52 AM

Posted 20 November 2007 - 03:00 PM

Too bad they got your cash. Did you notify the bank? They may try to get more from your account.
You asked about the Panda scan. It only works in IE and you will need to allow the popup.
You should do a scan with Super Antispyware. It will remove whatever it finds including Smitfraud malware.
Install Super Antispyware free. Run it in safe mode. Allow it to quarantine whatever it finds.
http://www.superantispyware.com/


Bit Defender will also remove whatever it finds. Use it if you can't get Panda to work.
Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.
http://www.bitdefender.com/scan8/ie.html

How to Start Windows in Safe Mode:
http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users