Results 1 to 7 of 7

Thread: DivoCodec Still lingers

  1. #1
    Junior Member
    Join Date
    Oct 2007
    Posts
    20

    Default DivoCodec Still lingers

    In your latest update it says it detects the Trojan DivoCodec which I installed stupidly trying to watch a video.

    Anyway I ran Spybot and it founds some things and i told it to remove everything. I then rebooted in case that was necessary but I'm still getting the IE pops even though I use Firefox. So the DivoCodec isn't fully detectable/removable by Spybot.

    thewird

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,678

    Default

    Hello.

    Thank you for letting us know, did you try running Spybot-S&D in safe mode and are you using version 1.5?

    Regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    Oct 2007
    Posts
    20

    Default

    I have 1.5 fully updates yes. I tried scanning in safe mode for both administrator and my account and it didn't find anything new (except for some cookies). The popups still continue.

    thewird

  4. #4
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,678

    Default

    Hello.

    Please produce a complete Spybot scan report:

    Open Spybot-S&D and start a scan ("check for problems"). After the scan, right-click in the results field and choose either "Save full report to file..." or "Copy full report to clipboard".

    Attach the file (or copy the report) to an email and send it to: detections(at)spybot.info (Replace AT with @)

    Then follow the procedure in this link:
    "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

    Start your own thread in the Malware Removal Forum

    A helper will advise you when available. Cheers.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  5. #5
    Junior Member
    Join Date
    Dec 2007
    Posts
    1

    Default Removal of Divocodec breaks .avi file handler

    I managed to remove the Divocodec that was errantly installed by my daughter. I cleaned the registry of its Run values, but now I cannot play .avi files. If I rename the files to .wmv , they will play. I attempted reloading of Windows Media player 11 on my copy of XP Pro, but to no avail.
    The .mpg format works just fine.

    There has to be a decent way to re-register the .avi handler or registry information that points to the original again.
    Suggestions?

  6. #6
    Junior Member
    Join Date
    Feb 2008
    Posts
    2

    Exclamation

    Hello,

    I have the same issue, Spybot S&D found the divo codec in the registry and other places & said it removed it & after a restart I still get pop ups in IE.

    I have scanned in safe mode & made sure to update the program to the latest version but its still somewhere on my system.

    Thanks

  7. #7
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,678

    Default

    Hi bryanviper,

    The exploit uses code that mutates, it would be best if you followed the procedure in this link:
    "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) and start a thread in the Malware Removal Forum

    A helper will analyze the log/s and advise you when available.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •