1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Adware in Screensver builder

Discussion in 'Virus & Other Malware Removal' started by starchild, Apr 9, 2004.

Thread Status:
Not open for further replies.
  1. starchild

    starchild Thread Starter

    Joined:
    Sep 17, 2002
    Messages:
    2,111
    I started this in the image topic

    http://forums.techguy.org/t217648.html

    That's kind of long as I tried to go over all the details or the problem I was having with ACEZ Screen Saver Builder (I had bought about 10 months ago) no longer working. I had been writing to the person selling it, and not getting much help. In the beginning it worked fine. I had downloaded the trial and than paid $24.95 for the KEY. Also says on the site that as new versions become available they can be downloaded and the same key used.

    I didn't use it too much, but a few months after buying it, it stopped working. Well, sometimes it did, but most time only random colors would come up on the screen, without the images. And when I closed it a box would be on my screen saying "this screensaver was made with the trial version of ACEZ SCB... if you would like to purchase it (and the website).Even though I had bought the key, put it in, and it showed it was resestered to me. The few times I does work okay, this box doesn't come up.

    I tried sending one to my daughter, and she said it did the same thing on her computer. Only blank screen, random colors, and no images.

    If I make the pictures REALLY small it usually works, and sometimes using the "full screen" setting. (at the start it worked on all settings and sizes) I have the same computer, monitor and settings as I did when I bought it. I've tried using different sizes and resolutions. But, seems like the ones I used when I first bought it would still work, if they did then.

    Okay.. the other day I downloaded it again from the website (as it says can be done, to upgrade. But I think it's the same version I already had) and put the key in and it still didn't work. BUT, I saw offers of free screensavers on ACEZ to download. I downloaded one (to see if it worked) and it did. But it wasn't at all like the program makes them, which is more of a slide show. The one I downloaded was a screen that stayed the same, with flowers popping up on it and at some point a cartoon of a mower taking them off. So, it wasn't built with the program they sell.

    I ran Adaware this morning and came up with 26 files, mainly reg keys, from eUniverse and WhenU. There was also something in my computer that said SAVE (I tracked down to SAVE NOW) .... my point, this stuff came with the Acez free screen saver I downloaded. I took it all out, and checked the license agreement for the screen saver (which is a trial download, but buying the key changes this) and it says this is included in it, too.

    I know.... I didn't really read the license agreement when I first put it in, and then bought it. I didn't know spyware (they say it ISN'T this) would be part of it, when I PAID FOR THE KEY.

    I've written to the company to ask about this (they haven't very helpful about my problem with it not usually working).

    What I'm wondering is. Since last summer when I first put it in, and bought the key to register it (and it worked fine) I put in Zone Alarm. Nothing has come up from ZA when I've tried using the SC builder since. But, maybe something in ZA is stopping the adware that is with the SCB from working, and this interferes with it working?

    Also, I run Adaware and take out what it finds, and don't remember seeing these before (eUniverse and WhenU-which came with the made screen saver, but are mentioned in the license agreement with the bought one).

    I know, I can take everything out and reinstall the screen saver again with Zone Alarm disabled and see what I get and if it works.

    When I install the SCB there's a box checked for putting a SEARCH on the browser, which I always uncheck. If this is required for it to work right, why would there be an option?

    The few responses I've gotten from the website haven't mentioned anything that might be required for it to work right. In fact, he kind of insinuated it might be my computer or settings. The last time (few months ago) he suggested setting the resolution lower and letting him know if it worked. It didn't work, I let him know, and never heard again.

    I guess I expect a lot for my $24.95 :)

    I wanted to see if anyone here had any feedback or ideas, before I do all that.

    Also, there's a new entry in my HJT log, R3

    I'm wondering might relate to the search I UNcheck when I install the screen saver, and didn't check when I installed the "already made" one from their website. (which I have since taken out)

    And, I don't know what PWMediaSendControl Class is. For some reason I think of it as from WIN MEDIA PLAYER?

    Logfile of HijackThis v1.97.7
    Scan saved at 1:02:03 AM, on 4/10/04
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
    C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\MOUSE\SYSTEM\EM_EXEC.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
    C:\PROGRAM FILES\AIM95\AIM.EXE
    C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\WINOA386.MOD
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/?.intl=us
    R3 - Default URLSearchHook is missing
    O1 - Hosts: 64.91.255.87 www.dcsresearch.com
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
    O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\PROGRAM FILES\WS_FTP PRO\WSBHO2K0.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [AVG_CC] C:\PROGRAM FILES\GRISOFT\AVG6\avgcc32.exe /startup
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\MOUSE\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe
    O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
    O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    O4 - Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O9 - Extra button: AIM (HKLM)
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    thanks,

    Carrie
     
  2. starchild

    starchild Thread Starter

    Joined:
    Sep 17, 2002
    Messages:
    2,111
    (sorry about the confusion, I'm getting ready for company this weekend, and should be cleaning house instead of on the computer!)


    I took out Zone Alarm for around two weeks, after tracking this down as one possible reason WMP wasn't working with a streaming audio I wanted to listen to (live cast) After I took out ZA and reinstalled WMP, it worked.

    I now have ZA back in, but didn't for around 2 weeks, and it was during that time I dl'd the free screen saver from ACEZ site, and got all the spyware that Adaware found.

    That's how I figure it anyway.

    I'm pretty sure I had Zone Alarm in all the times I installed and reinstalled the SCB, but didn't when I first got it and paid for it (and it worked)


    I'm trying to track down what might be involved in this, and it not working.

    IF the SCB (even after I paid for the key?) requires software to be installed and working for IT to work, and Zone Alarm kept this from happening, (either it being installed or then working) maybe that's a clue in why the program doesn't seem to work (and when it doesn't, a box comes up saying it was made with the trial version)?

    Maybe it's just a bug in the software that kicks in a few months after it's paid for and can't be fixed?

    ~ Carrie
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/218745

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice