Particularly annoying spyware...

Ilander · 10-27-2004, 10:28 AM

"Cashbackbuddy" REPEATEDLY gets on the Laptop de Muerte...and it's really beginning to frustrate me...I DON'T DOWNLOAD IT OR GO TO "BAD" SITES...and yet, after I run adaware and spybot over and over again and then occaisionally go into Program files and REPEATEDLY UNINSTALL IT, it persists...I look down, and there's the stupid dog icon in my tray right now...three centimeters left of the clock...and I've already CLOSED it four times today...

So, apparently, nothing I know of to do is working...and it won't let me erase the folders in Program Files directory! What the heck??? I can't erase a file on a computer that I'm the administrator for? That doesn't make any sense whatsoever!

So, anyone have a solution for this? Should I just try to change all the file extensions so that it can't open? Will it come back?

Xen · 10-27-2004, 10:33 AM

Have you tried anti virus scan?

Hivetyrant · 10-27-2004, 10:34 AM

What OS are you running??? There might be a solution if its XP, just click start, "run", then type msconfig, then click the "startup" tab and that will list everything that is running on start up, but I doubt that will work if it keeps re-starting itself.
The reason you cant delete the folder is because the program is probably running, or one of the files in there is anyway. So find a way to stop it running and then delete them.
If your running XP, its a simple matter of checking all your running "processes" and ending what looks suspicious.

Ilander · 10-27-2004, 10:46 AM

I'm running XP...but the thing is...I don't know where this nasty little booger is hiding...I can find "cashback.exe" incredibly easily, and kill it every couple of minutes...but then it comes back! I'm not sure which process on my process list refers to the one that brings it back...

Hivetyrant · 10-27-2004, 10:50 AM

I seem to recall it bieng in the "system32" folder in your windows directory, look for something similar to "Cashback" and a few dll's as well.

Bungleau · 10-27-2004, 10:54 AM

Have you tried running HiJack This? That may find many more places where it's hiding...

This "reinstall" behavior is quite common among spyware and malware. Consider it the new hydra... with each head cut off, another one grows back.

You may need to boot up in Safe Mode in order to completely disable it, too. Just a thought...

Larry_OHF · 10-27-2004, 11:11 AM

Time to dig into the registry and search for your keyword, then delete what you find...
if none of the above has yet helped 100%.

By the way, here is a google search. It says your problem has some aliases.

Alias: CashBack Buddy, CashBackBuddy, CashBack by BargainBuddy

See here for removal tips.
http://www.giantcompany.com/antispyw...-CashBack.aspx

[ 10-27-2004, 11:18 AM: Message edited by: Larry_OHF ]

Lucern · 10-27-2004, 02:56 PM

Ah bargain buddy...how I hate thee.

You could also try Webroot Spy Sweeper. It got rid of my most annoying spyware, but it's really only temporary since you can't update the spyware database without giving them money.

Stormymystic · 10-27-2004, 03:37 PM

http://www.softpedia.com/public/cat/...0-17-150.shtml
try this, it really helped me get rid of stuff I did not even kno wI had on my computer

LennonCook · 10-27-2004, 06:37 PM

And once you get rid of it, you might want to take steps to not get it again. Prevention is always better than cure. [img]smile.gif[/img]

10-27-2004, 10:46 AM	#4
Ilander 20th Level Warrior Join Date: December 28, 2003 Location: Kentucky Age: 39 Posts: 2,820	I'm running XP...but the thing is...I don't know where this nasty little booger is hiding...I can find "cashback.exe" incredibly easily, and kill it every couple of minutes...but then it comes back! I'm not sure which process on my process list refers to the one that brings it back... __________________ Is that what you really want to say?

10-27-2004, 10:54 AM	#6
Bungleau 40th Level Warrior Join Date: October 29, 2001 Location: Western Wilds of Michigan Posts: 11,752	Have you tried running HiJack This? That may find many more places where it's hiding... This "reinstall" behavior is quite common among spyware and malware. Consider it the new hydra... with each head cut off, another one grows back. You may need to boot up in Safe Mode in order to completely disable it, too. Just a thought... __________________ B Save Early, Save Often Save Before, Save After Two-Star General, Spelling Soldiers -+-+-+ Give 'em a hug one more time. It might be the last.

10-27-2004, 11:11 AM	#7
Larry_OHF Ironworks Moderator Join Date: March 1, 2001 Location: Midlands, South Carolina Age: 49 Posts: 14,759	Time to dig into the registry and search for your keyword, then delete what you find... if none of the above has yet helped 100%. By the way, here is a google search. It says your problem has some aliases. Alias: CashBack Buddy, CashBackBuddy, CashBack by BargainBuddy See here for removal tips. http://www.giantcompany.com/antispyw...-CashBack.aspx [ 10-27-2004, 11:18 AM: Message edited by: Larry_OHF ] __________________

10-27-2004, 03:37 PM	#9
Stormymystic Knight of the Rose Join Date: April 8, 2003 Location: Arkansas Age: 49 Posts: 4,442	http://www.softpedia.com/public/cat/...0-17-150.shtml try this, it really helped me get rid of stuff I did not even kno wI had on my computer __________________ [url]\"http://stormymystic.deviantart.com/gallery/\" target=\"_blank\"> [img]\"http://img92.imageshack.us/img92/3968/stormyvx6.jpg\" alt=\" - \" /></a>

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
More spyware	Cerek	General Discussion	26	02-20-2005 08:58 PM
I really need help please! (spyware)	Sigmar	General Conversation Archives (11/2000 - 01/2005)	11	03-03-2004 09:34 PM
Spyware and MSN-Help!	Kaltia	General Conversation Archives (11/2000 - 01/2005)	2	01-02-2004 10:55 AM
Spyware	Kaltia	General Conversation Archives (11/2000 - 01/2005)	8	11-27-2003 05:38 AM
Help with Spyware!	antryg	General Conversation Archives (11/2000 - 01/2005)	22	04-23-2003 07:10 PM

10-27-2004, 10:28 AM	#1
Ilander 20th Level Warrior Join Date: December 28, 2003 Location: Kentucky Age: 39 Posts: 2,820	"Cashbackbuddy" REPEATEDLY gets on the Laptop de Muerte...and it's really beginning to frustrate me...I DON'T DOWNLOAD IT OR GO TO "BAD" SITES...and yet, after I run adaware and spybot over and over again and then occaisionally go into Program files and REPEATEDLY UNINSTALL IT, it persists...I look down, and there's the stupid dog icon in my tray right now...three centimeters left of the clock...and I've already CLOSED it four times today... So, apparently, nothing I know of to do is working...and it won't let me erase the folders in Program Files directory! What the heck??? I can't erase a file on a computer that I'm the administrator for? That doesn't make any sense whatsoever! So, anyone have a solution for this? Should I just try to change all the file extensions so that it can't open? Will it come back?

10-27-2004, 10:33 AM	#2
Xen Symbol of Moradin Join Date: June 5, 2002 Location: Slovenia,Ljubljana Age: 37 Posts: 8,554	Have you tried anti virus scan?

10-27-2004, 10:34 AM	#3
Hivetyrant Jack Burton Join Date: August 24, 2002 Location: Aussie now in the US of A! Age: 38 Posts: 5,403	What OS are you running??? There might be a solution if its XP, just click start, "run", then type msconfig, then click the "startup" tab and that will list everything that is running on start up, but I doubt that will work if it keeps re-starting itself. The reason you cant delete the folder is because the program is probably running, or one of the files in there is anyway. So find a way to stop it running and then delete them. If your running XP, its a simple matter of checking all your running "processes" and ending what looks suspicious.

10-27-2004, 10:50 AM	#5
Hivetyrant Jack Burton Join Date: August 24, 2002 Location: Aussie now in the US of A! Age: 38 Posts: 5,403	I seem to recall it bieng in the "system32" folder in your windows directory, look for something similar to "Cashback" and a few dll's as well.

10-27-2004, 02:56 PM	#8
Lucern Quintesson Join Date: August 28, 2004 Location: the middle of Michigan Age: 43 Posts: 1,011	Ah bargain buddy...how I hate thee. You could also try Webroot Spy Sweeper. It got rid of my most annoying spyware, but it's really only temporary since you can't update the spyware database without giving them money.

10-27-2004, 06:37 PM	#10
LennonCook Jack Burton Join Date: November 10, 2001 Location: Bathurst & Orange, in constant flux Age: 38 Posts: 5,452	And once you get rid of it, you might want to take steps to not get it again. Prevention is always better than cure. [img]smile.gif[/img]

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)