Spybot Logo
Go Back   Safer-Networking Forums > Software > Spybot-S&D
Register ProjectsBlogs FAQ Search Today's Posts Mark Forums Read Home Support Download Donate

Reply
 
Thread Tools Display Modes
Old 2005-10-24, 18:30   #1
jstelzer
Junior Member
 
Join Date: Oct 2005
Posts: 4
Default Magic Control Agent

I have run Spy bot several times and each time I run the scan the problem "magic control agent" comes up. After the problem is fixed successfully casino pop-ups still load and then i run the spy bot again etc etc. Please could you advise how to successfully remove the magic control agent.

Thanks in advance

Joe
jstelzer is offline   Reply With Quote
Old 2005-10-25, 06:38   #2
tashi
Member of Team Spybot
 
tashi's Avatar
 
Join Date: Oct 2005
Location: USA
Posts: 23,454
Rated LASSHes: 16
Default

Hello Joe.
Which version do you have of Spybot-S&D?
If you are not sure you can find out by opening Spybot>Help>About.
It will give you the version number and latest detection update.
Also what is your operating system and do you have other security programs installed.

Thanks.
tashi is online now   Reply With Quote
Old 2005-10-25, 10:05   #3
jstelzer
Junior Member
 
Join Date: Oct 2005
Posts: 4
Default

Hi,
its version 1.4 with detection update 21.10.05. I am using windows xp.

Joe
jstelzer is offline   Reply With Quote
Old 2005-10-25, 22:38   #4
tashi
Member of Team Spybot
 
tashi's Avatar
 
Join Date: Oct 2005
Location: USA
Posts: 23,454
Rated LASSHes: 16
Default

Ok thanks.
Lonny will help you clear up the magic control agent as soon as he is back on the forum.
tashi is online now   Reply With Quote
Old 2005-10-26, 05:19   #5
LonnyRJones
Visiting Staff
 
Join Date: Oct 2005
Posts: 5,089
Default

Hi Joe

I need a SpyBot report and the name of the random startup executable, it is normally not visible but can be seen with Microsoft's msconfig, do not disable it yet nor delete the file.
Go start run type msconfig >startup tab and write down the name of the exe and where it is located,
what your looking for is the - start the name of the file is random.
Write that down for us please. see attached screen shot for an example.

Open SpyBot 1.4, check for and get any updates available, close all browsers, check for problems and fix everything found. Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools,and view report, ensure all the options are select near the bottom except
Uncheck[ ] do not report disabled or known legitimate Items,
uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.
Now select (near the top) view report, Press export, in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button , navigate to and attach or post that report please.

Last edited by LonnyRJones; 2005-10-26 at 05:21.
LonnyRJones is offline   Reply With Quote
Old 2005-10-30, 23:50   #6
travel4scuba
Junior Member
 
Join Date: Oct 2005
Posts: 1
Default Same Issue

I've had this same issue for about 3 months. If you have it figured out please post the solution.
travel4scuba is offline   Reply With Quote
Old 2005-10-31, 12:12   #7
jstelzer
Junior Member
 
Join Date: Oct 2005
Posts: 4
Post Files requested...

Lonny,
I have attached the log file as requested. The file is called lymahiqfu.exe. Prior to that the file was called agjvdrzm.exe Just after finishing the latest cleanup (which showed magic control as being present again), two casino popups loaded even though toolbar popupblockers were active.

Joe
Attached Files
File Type: txt deb1.txt (29.7 KB, 24 views)

Last edited by jstelzer; 2005-10-31 at 12:15.
jstelzer is offline   Reply With Quote
Old 2005-10-31, 13:13   #8
LonnyRJones
Visiting Staff
 
Join Date: Oct 2005
Posts: 5,089
Default

Hi

check to be sure its still useing the same name with msconfig ?
go start run and paste in
c:\windows\system32\lymahiqfu.exe -uninstall
then hit ok or enter, you should get a prompt like are you sure da da da, yes

Open SpyBot > mode > advanced > tools > ActiveX
On that page select each of these one at a time and choose remove
--- ActiveX list ---
{95460ABD-946A-46FF-9F56-268718323EEE} ()
{B2B0AEDF-7CDF-4792-BB67-7654AD1E1B13} ()
{BD3653E4-884B-43C4-970B-670802501B7F} ()
{C6760A07-A574-4705-B113-7856315922C3} ()
{D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0} ()
{EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} ()

Close SSD for now.

Uninstal mailskinner via addremove programs, it is what brought in Magic Control Agent we think.
Uninstall Beach_Islands Screensaver, More information >
" Beach_Islands Screensaver. The freeware version comes with GAIN branded ads (pop-ups and others). ScreenScenes do however offer you the option of doing away with the ads by purchasing the screensaver for a whopping $ 30...""
Uninstall these programs also via addremove programs
Viewpoint Manager
Viewpoint Media Player
Viewpoint Toolbar
Can you provide more information on this item ? I see its disabled
Located: Startup (disabled), Kazga.exe (DISABLED)
command: C:\PROGRA~1\KAZGUA~1\Kazga.exe

Download Brute Force Uninstaller.
Unzip it to it’s own folder (c:\BFU)

RIGHT-CLICK HERE and choose "Save As" "all files" (in IE it's "Save Target As") in order to download EGDACCESS Remover. Save it in the folder you made earlier (c:\BFU)

Start the Brute Force Uninstaller by doubleclicking BFU.exe

In the scriptline to execute copy and paste c:\bfu\EGDACCESS.bfuPress execute and let it do it’s job.

Wait for the complete script execution box to popup and press OK.Press exit to terminate the BFU program.

Its best to then restart the PC, check for and fix any problems found with SpyBot. Once fixed they shouldnt show again.

Let us know

Last edited by LonnyRJones; 2005-10-31 at 13:16.
LonnyRJones is offline   Reply With Quote
Old 2005-10-31, 17:47   #9
jstelzer
Junior Member
 
Join Date: Oct 2005
Posts: 4
Default I will try this

Lonny,
Thanks for the quick response. I will do this and report back. Thanks for your help.

Joe
jstelzer is offline   Reply With Quote
Old 2006-01-31, 05:30   #10
rscott415
Junior Member
 
Join Date: Jan 2006
Posts: 1
Default Still having problems removing magic control agent

Hello out there, I've been having a problem removing the magic control agent. I even tried the brut force application with no success. Any suggestions out there will be greatly appreicated. Thanks
rscott415 is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 16:41.


Copyright © 2000-2010 Safer-Networking Limited. All rights reserved.