pornis.hlpr file

[Josep]

I do the cleaning of temp files you suggest. It is not a helpful solution. Problem persist. Spybot S&D is continuing collapsing at 80% of the scanning when it scans, in that moment the pornis file. I have restart the PC ( the windows blue screen of death appears). I have avast antivirus in my PC ( avast internet secure payment version) and is not detecting any problem. Also as the folks of this forum I have this problem in my Pc since the 14th october.

Please if spybot has this problem I can not scanning with it. Anyway Spybot protects even when we can not scan our pc?

I have a Compact Presario V6000 intel centrino with Windows XP I inform about mu PC if this information can help your team to find a solution.

Never before I had any problem with Spybot S&D . I was very happy with it an donated money.

Thank you very much for your answer.

[spudd57]

Tried the team spybot instructions from Yodama
No good....
I also tried to rectify the problem by uninstalling the programme including all it's files i.e;
C:Program FilesSpybot - Search & Destroy
C:Documents and SettingsAll UsersApplication DataSpybot - Search & Destroy
And downloading it afresh...... Still no good.

This appears to be a problem with the spybot programme since 13/10 update.
RE: Updates: 2010-10-13

--------------------------------------------------------------------------------

2010-10-13
Malware
+ Bredolab.fb + FakeAlert.gen + Fraud.DesktopSecurity2010 + Fraud.InternetSecurity2010 + Fraud.SecureEssentials2010 + Fraud.Sysguard + Win32.FraudLoad.edt
Trojan
++ Pornis.hlpr ++ Win32.Agent.angq + Win32.Agent.fbx + Win32.Agent.sc + Win32.Bifrost ++ Win32.ClickPotatoLite + Win32.Muollo ++ Win32.OnLineGames.aseh + Win32.OnLineGames.down ++ Win32.OnLineGames.gqna ++ Win32.OnLineGames.gqoa ++ Win32.OnLineGames.kdka ++ Win32.OnLineGames.leta ++ Win32.OnLineGames.rzri ++ Win32.OnLineGames.scue ++ Win32.OnLineGames.smdd ++ Win32.OnLineGames.smdm ++ Win32.OnLineGames.snkn ++ Win32.OnLineGames.snmj ++ Win32.OnLineGames.snns ++ Win32.OnLineGames.snrp ++ Win32.OnLineGames.soaq ++ Win32.OnLineGames.soih ++ Win32.OnLineGames.soij ++ Win32.OnLineGames.sooa ++ Win32.OnLineGames.spir ++ Win32.OnLineGames.sqqn ++ Win32.OnLineGames.srtf ++ Win32.OnLineGames.srtl ++ Win32.OnLineGames.srzm ++ Win32.Shutdowner.bqq + Win32.Turkojan ++ Win32.Xpack.Gen3 + Win32.ZBot + Zlob.Downloader
Total: 3153258 fingerprints in 1069636 rules for 5855 products

[spybotsandra]

Hello,

Please send us an e-mail with the content of your temp directory.
Therfore click on "start" , then "cmd" (without quotation marks).
Then "cd\"
"cd windows\temp"
and then
"dir > c:\content.txt"
Please send us the "content.txt".

Send the e-mail with the subject "Pornis.hlpr" to: detections(at)spybot.info .
Thanks.

Best regards
Sandra
Team Spybot

[seedling]

Hi,

I tried your suggestion Yodama, although my machine had been fully updated (I had the Spybot Update from the 13th running on machine when all of this occurred).

And I even went ahead and manually updated my machine this time. Oddly enough I could not open Spybot then as clicking on the icon would result in opening up the update (only) for some unknown reason. So I went to the website and downloaded a new copy of the program (directly from the site). Then I opened it, updated it, cleared my temp files (as was suggested to the others) and rebooted.

Upon rebooting the machine I opened up Spybot and went to "Immunize" (which resulted in an "Access Violation @ Address 005A2766 in Module 'SpybotSD.exe' read of address 4F4D54DS"). However, I continued onto run the scan.

However, as soon as I started the scan the MSSE program (which has no icon showing up in the right hand corner and I thought had deleted itself off of my machine suddenly starts downloading again). And not long after that happens I notice that the Spybot Scan was frozen again (only this time it was short - as in very early on - unlike the 80% positions of the past). And I also noticed that the Spybot Scan was frozen on "Fraud XP Antivirus" (and all the while MSSE has been suddenly attempting to download)????

So I simply stopped MSSE from downloading and voila the Spybot Scan takes off again! All of which seemed to work at first, as the scan was completed although it had nothing to report really? However, I tried running another scan (no good - stopped at 80% again). Then I cleared the temp files, attempted to update Spybot again, rebooted, cleared the temps again, checked updates and immunization again and started running a new scan only to get to 80% and stop. And I basically let it run off and on throughout the day like that to no avail.

And given the fact that Spybot is freezing (while MSSE is downloading in the back ground) then I am not so sure that I am getting "False Positives". In that, as I have stated my machine had the most recnt Spybot Update when all of this started. So I am not real sure what the deal is here? Although, you would have to agree that it is a mighty big coincedence that I couldn't find the KB2267610 Update on the Microsoft website either now right?

Also, I've e-mailed the content (as Sandra requested as well). And again, thanks for all of your help here no matter what!!

[rickpx14]

These instructions do not work for me /are not precise. Pls provide step by step what you need me to do, thanks.

Please send us an e-mail with the content of your temp directory.
Therfore click on "start" , then "cmd" (without quotation marks).
Then "cd\"
"cd windows\temp"
and then
"dir > c:\content.txt"
Please send us the "content.txt".

[Josep]

Also I need more instructions to send temp files.
I tried it without success.

Por exemple: Should i write "cmd" while charging windows or after...?
Write cmd ( the three letters at the same time or write one after the other)?

Thanks

[spybotsandra]

Hello,

After you have booted your pc completely.
Press Start (on the lower left on your screen).
Then choose Run.
Then just type cmd and hit OK.

Best regards
Sandra
Team Spybot

[toonman4]

Hello,

Please send us an e-mail with the content of your temp directory.
Therfore click on "start" , then "cmd" (without quotation marks).
Then "cd\"
"cd windows\temp"
and then
"dir > c:\content.txt"
Please send us the "content.txt".

Send the e-mail with the subject "Pornis.hlpr" to: detections(at)spybot.info .
Thanks.

Best regards
Sandra
Team Spybot

Contents sent

[spybotsandra]

Hello,

We have changed the detection rule for Pornis.hlpr, so it should not cause any more problems.
Please download the latest detection update (2010/10/20).
Or choose the direct installation file.
That should fix it.

Best regards
Sandra
Team Spybot

P.S.: Please do not use PM's for requesting help. The forum is there for a reason. Thanks.

[rickpx14]

Thanks!