Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

no software agrees with CBL


  • Please log in to reply
1 reply to this topic

#1 barleysinger

barleysinger

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:02:27 PM

Posted 21 October 2013 - 03:15 AM

The CBL site keeps blocking me; claiming I have problems which *CANNOT* be found by ANY piece of software, even those that specialise in that problem (virus, adware, malware, trojan, bot net, etc). No other spam site blocks me or has found odd traffic from my IP address.

Right now the CBL site claims that I have ZEUS (no other black listing site *EVER* has a listing for me) and Zeus is very bad, grabs your financial details, and - it is SUPPOSED to be easy to detect (and remove). Yet none of the tools out there finds it (see comments below on software used),  No company seems to have any ZEUS detection/removing software that can find it on my system (or any other problems there - except for SpyHunter who won't fix anyting unless I pay them and constanlty ask me to pay).


*** THE CBL SITE ***

I have had a number of very odd listings on the CBL site, in that no other site blacklists me for the things they state that my system is infected with. I can also NEVER get any pieces of detection software, to detect the problems they claim that I have. I do not see any traffic to bad IPs that are involved when I use "wireshark" (which is what the CBL says to use).

I was told by theCB: earlier that I had zeroaccess, and a few days later that I was "infected with or NATting for s_smart12"

Every time they make a claim of this sort, all incestigations fail to find it (AVG, MALWAREBYTES, and things I get just for that items detection and removal). So I *NEVER* get any piece of software to detect what they claim I have.  For the "zeroaccess root kit", I got a number of programs that supposedly can *ALWAYS* find and remove it (especially when used together) , and not one of them found any root kits of any kind. I know I treid these ones (and more) ::

avg_remover_zeroaccess.exe
SecurityCheck.exe
ESETSirefefCleaner.exe
rootkitremover.exe (by McAfee, which as it is a McA'fee' product, it found nothing as always)
ACG and MALWAREBYTES find nothing

Yet the CBL claims a virus/trojan or BotNet was found recently (within a few days max) every time that I go there and check my IP address - and they ALSO seem to change what thing they claim I have every 3 to 5 days. Always a new one, and it is never found by any piece of software (no evidence).

After running a dozen different well reviewed pieces of FREE antivirus software I have had no detections or removals for any of the things they have claimed I have.

Eventually I tried SpyHunter.

THIS one piece of software claims that I have :trojan.generic" whcih is also very bad, but nothing else finds it (even things recomended for removing it like RKill followed by MALWAREBYTYES) and SpyHunter insists that I pay them to get rid of the thing they say they found..

SpyHunter claimed to find "6 infections" of trojan.generic
SpyHunter also gave NO REAL DETAIL about which file(s) is/are involved or if it is a registry entry only

So I wanted to be sure it was gone and SpyHunter won't remove anything unbless you pay them (whcih makes their product "scare ware:  even if the warnings are real).

So I ran a lot of other software

I used RKill before running the other removal tools (to be certain any processes that were running would not screw up the removal).

Then I used these :

* Norton Power Eraser (NPE) : it is recomended for this problem
- -  did not find anything at all
* TDSSKIller (by kaspersky)  : it is recomended for this problem
- -  did not find trojan.generic (read that it was recomnded for the removal of this item)
* Malwarebytes  : it is recomended for this problem
- -  did not find trojan.generic (a tool recomnded online for that trojans removal)

* AVG Antivirus did not find trojan.generic
* mcafee did not find it (but it never seems to find anything)

I ran several rootkit removers as well (which found nothing)

So I did another search and went to symantec.com for infor on how to remove this "easy to remove" item (easy according to symantec). Symantec said to Run Norton Power Eraser (NPE) and I did that already. I followed the Symantec link for "Norton Power Eraser did not remove this risk" which takes me off to a page trying to get me to buy their product "Norton Bootable Recovery Tool".
Does anyone honestly find this, or is it always a scam to get you to buy something?

Is any of this real?
How can I tell?
I have logs from WireShark and none of them have anything questionable aside from annoying amazonaws.com traffic (and I have no ida if it is bad or not).

I am beginning to wonder if SpyHunter really found anything gocen how hard they pound on you to pay & that no other piece of software found what they claim to be there.   I *HAD* read very good things about SpyHunter. I am trying not to simply suspect that SpyHunter is yet ANOTHER of the many fake antivirus software packages out there.
 


Edited by barleysinger, 21 October 2013 - 03:27 AM.


BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:01:57 PM

Posted 21 October 2013 - 05:27 AM

SpyHunter is yet ANOTHER of the many fake antivirus software packages out there.

This is the only part of your post that I can 100% agree with. The program is often compared with many Registry Cleaners, and other programs that offer "Pay to remove" type actions (Fraud / rogue type generally).

 

This is to Upgrade your topic to the Experts help area, as you seem to have a major problem.

 

 

Please follow the instructions in the Preparation Guide For Requesting Help starting at Step 6.

When you have done that, start a new topic and post the required logs to  Virus, Trojan, Spyware, and Malware Removal Logs forum, NOT here, for assistance by the Malware Response Team Experts.

 

If you are unable to complete any step, please post the topic and leave a full description of your problems

 

 

Please Use Copy / Paste for your responses, and Do Not Attach them unless your helper requests this.

 

If HelpBot responds to your topic, please follw his Step #1 so the team will be notified.

 

After doing this, please reply back in this thread with a link to the new topic so we can closed this one.

 

Thank You -






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users