Results 1 to 2 of 2

Thread: TheRealSearch

  1. #1
    Junior Member
    Join Date
    Nov 2011
    Posts
    1

    Default TheRealSearch

    Hello all.
    I'm trying to sort out my partners computer. All evidence suggests her system has been infected by TheRealSearch. Further enqiries suggest that CWshredder should remove this. It finds it, says it has been removed, then you scan again and there it is still there.
    I have found the Spybot manual removal guide for TheRealSearch and, quite frankly, it is totally beyond me (and I'm no newbie by any means). First it says...

    Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.

    Entries named "quicken".
    Entries named "winrar".
    Entries pointing to "\quicken\quicken.exe".
    Entries pointing to "<$WINDIR>\editpad.exe".
    Entries pointing to "<$WINDIR>\quicken.exe".
    Entries pointing to "<$WINDIR>\quicken.exe".

    How do you do this? As far as I can see (and believe me I've been looking at Spybot for the last hour trying to figure it out) you cannot get Spybot to look for, or remove, specific files. All you can do is scan the entire system and if it doesn't find them, it can't remove them. Am I missing something? Or misunderstanding something maybe?

    Then it says...

    Please use Windows Explorer or another file manager of your choice to locate and delete these files.

    The file at "<$WINDIR>\editpad.exe".
    The file at "<$WINDIR>\quicken.exe".
    The file at "<$WINDIR>\editpad.rsf".
    The file at "<$FAVORITES>\!! Free Dating Chat Program !!.url".
    The file at "<$FAVORITES>\!!Best FREE adult sex sites!!.url".
    The file at "<$FAVORITES>\100% Free MP3 Downloads.url".
    The file at "<$FAVORITES>\Online Casino- Free $200.url".
    The file at "<$FAVORITES>\Over 1 million Free XXX Pics.url".
    The file at "<$FAVORITES>\Preview Adult !NEW!.url".
    The file at "<$WINDIR>\editpad.exe".
    The file at "<$WINDIR>\quicken.exe".
    The file at "<$WINDIR>\winrar.exe".
    The file at "<$WINDIR>\winrar.exe".
    The file at "<$WINDIR>\winrar.exe".
    The file at "<$WINDIR>\waol.exe".
    The file at "<$FAVORITES>\Top FREE XXX porn Pics.url".

    No root path is mentioned, I've tried an all files and folders search to no avail, exactly how do you locate these files?

    At my wits end here, please someone, HEEEEEEEEEEEEEEEEELLLLP!!!!!!!!!.

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,961

    Default

    Hello phuquit,

    If this is a personal computer see the sticky which includes guidelines for this forum in post #1 and instructions in post #2 on how to provide the preliminary "DDS" logs which are used for analysis.

    "BEFORE You POST"(Please read this Procedure Before Requesting Assistance)

    Then start a new topic providing the DDS logs and a volunteer analyst will advise you when available.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •