CPanel

[cbrockfan]

Spybot failed to find CPanel, a spying program aka IAMBIGBROTHER from what I've read. My registry is FILLED with matches when a search is done for CPanel. Please advise!

Thanks, Sandy

[tashi]

Hi there.

AFAIK IamBigBrother (Keystroke Logger) must be manually installed, do you have any idea how it got on the PC in question?

If you would like to post a Spybot S&D log so that we can check the System please do the following:

Spybot-S&D version 1.4
Version 1.4 :Systems Supported (http://www.safer-networking.org/en/spybotsd/index.html)

Close all browsers
Open SpyBot, check for and get any updates available
Check for problems and fix everything found in red
Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except

Uncheck[ ] do not report disabled or known legitimate Items.
Uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.

Now select (near the top) view report.
Press export in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.

Or:
Follow the instructions in this sticky topic:
"BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the malware forum:
Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)

Cheers.

[cbrockfan]

Thank you Tashi for all of your help regarding CPanel IamBigBrother. I have NO idea how this got installed on my computer manually.

Here's the log I got.

Thanks again,
Sandy

[tashi]

Hi Sandy.

I do see an infection so I am going to send you to our malware removal forum so that we can take a look from a different angle and get more details. :)

You should also see this topic:
Sun Microsystems~Java. Security vunerability in older versions left on system (http://forums.spybot.info/showpost.php?p=12880&postcount=2 )
But we can get to that once a Helper has checked your HJT log.

Please follow the instructions in this sticky topic:
"BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D (http://forums.spybot.info/showthread.php?t=288)

Then start your own thread in the malware forum:
Malware Removal Forum (http://forums.spybot.info/forumdisplay.php?f=22)

Cheers.