sniper, sniperiu, 'sniper security desktop'; behaves like spyware

D

DanielR

New member
There's something on this machine that behaves like spyware, shows itself on rare occasions in its own window as 'sniper security desktop', is know only on Portugese sites, where it is claimed to be an anti-fraud bank security tracking software. The company is in Brazil. I don't know where it came from, I hope it hasn't recorded my passwords (including to this site), It is almost a year old, McAfee, Spysweeper, and Spy-bot do not recognize it, though some of its files appear plainly in System32 (as sniperiu, various .exe's, dll's, etc. with prefix -sn, not to be confused with valid Windows -sn.

A network acquaintance (who recommended Spy-bot) said its apparently legitimate links with European security and networking firms are not unknown for spyware outfits.
 
Last edited by a moderator:
Hello.

Are you requesting assistance to remove it?

If you would like to post a Spybot S&D log so that we can check the System please do the following:

Spybot-S&D version 1.4
Version 1.4 :Systems Supported
  • Close all browsers
  • Open SpyBot, check for and get any updates available
  • Check for problems and fix everything found in red
  • Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except
  • Uncheck[ ] do not report disabled or known legitimate Items.
  • Uncheck[ ] Include a list of services in report.
  • Uncheck[ ] Include uninstall list in report.
  • Now select (near the top) view report.
  • Click export and in the 'save in' box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report.

Or:
Follow the instructions in this sticky topic to get a HJT log:
"BEFORE you POST" -Preliminary Steps and scanning with SPYBOT-S&D

Then start your own thread in the malware forum and copy/paste the HJT log into the topic:
Malware Removal Forum :)
 
sniper

No, A scan is in progress at the moment. I'm just bringing this to others' attention. It seems bizarre that such an annoying and obviously spy-behaving piece of annoyance could have been distributed a year ago, and be completely unknown.

I didn't name the outfit; as there may be some chance they are legit. But how did it get on this machine is a complete mystery.

I'm having connection problems. Apologies if this double-posts.
 
Hello

If you can get a file, please send it zipped to: detections(AT)spybot.info Replace AT with @

Thanks.
 
You must log in or register to reply here.
Back
Top