Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Did Adware Se Make False Readings (dialer Virus)

  • Please log in to reply
2 replies to this topic

#1 05 Mustang

05 Mustang

  • Members
  • 17 posts
  • Local time:12:48 PM

Posted 08 July 2006 - 11:59 PM

Well, I been worried my computer picked up a dialer since Adware SE found a coulomb dialer, and no I dont look at porno sites. I been using firefox so I'm quite surprised since I stay on security pretty well.

Here is the log, can you guys tell me if these are harmless false readings? thanks a bunch!

Date scanned 6-20-06

obj[4]=File : C:\Program Files\Online Services\PeoplePC\Utilities\AtlBrowser.exe (*Note this "online service folder and contents" came on the computer since new.)

Dated scaned 7-7-06

obj[9]=File : C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP12\A0004921.exe

Edited by 05 Mustang, 09 July 2006 - 12:02 AM.

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,047 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:48 AM

Posted 09 July 2006 - 01:10 PM

PeoplePC ISP software is often preinstalled on many computers along with AOL, Earthlink, and MSN Explorer.

AtlBrowser.exe is flagged by other anti-spyware applications such as ewido and shows up in its log as follows:
HKLM\SOFTWARE\Classes\AppID\AtlBrowser.EXE -> Spyware.eZula : Cleaned with backup

Symantec considers it as part of Adware.Ezula.

I have not heard much postive news about PeoplePC and if your not using it as your ISP, then you can remove it per the instructions from Symantec. If you don't have success with Symantec's removal and your running Win XP/2000, download and scan with Ewido Anti-Spyware v4.0
Print out the Ewido Install and Scan Instructions.

Edit: Forgot to add that you have a related thread here: http://www.bleepingcomputer.com/forums/t/57923/dialers-virus-work-on-cable-internet/

To avoid confusion and duplication of effort in the future, please continue to post in the same thread topic you originally created until that problem is resolved. Thanks for your cooperation.

Edited by quietman7, 09 July 2006 - 01:15 PM.

Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 05 Mustang

05 Mustang
  • Topic Starter

  • Members
  • 17 posts
  • Local time:12:48 PM

Posted 09 July 2006 - 02:02 PM

ok will do quietman.

but.. is the second time i scanned still related to people pc? here is the log.

Dated scaned 7-7-06

obj[9]=File : C:\System Volume Information\_restore{D5341F9C-33F7-43CF-8BD2-1AE937C9BA1B}\RP12\A0004921.exe

oh, and i scanned with these programs after i found the dialer, these programs found nothing but tracking cookies.
Ewido Anti-Spyware v4.0
Adware se
spybot search and destroy
avg free
zone alarm pro spyware protection
a-squared guard 30 day trail
and i setup spyware guard

-As soon as I found out what the second log is, I will be done.

I know how it goes helping a new member, kind of hard not knowing them and knowing they are new. Im not using you guys, so you know. But don't worry I refer everyone I know with computer problem to your forum, you guys got a good stack of info and tutorials.

Edited by 05 Mustang, 09 July 2006 - 02:13 PM.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users