Spyware masquerading as Security Center?

**Lusted** · July 18, 2006, 06:11 PM

Okai was watching a video and it said i needed to download the latest codex to view it, but instead of it being codex, it turns out to be this Security Center thing which i think is Spyware, and im trying to remove it from my computer, buts added in a lot of .exes to the processes list in task manager.

Dammit, just did a google search of one of the processes, its malware, im downloading some software to try and take care of it, but ill need your advice.

**fatsheep** · July 18, 2006, 06:15 PM

Originally Posted by Lusted

Okai was watching a video and it said i needed to download the latest codex to view it, but instead of it being codex, it turns out to be this Security Center thing which i think is Spyware, and im trying to remove it from my computer, buts added in a lot of .exes to the processes list in task manager.

Dammit, just did a google search of one of the processes, its malware, im downloading some software to try and take care of it, but ill need your advice.

Switch to linux.

Ok nevermind that's probably not what you wanted to hear.

Anyways, I'd download AntiVir Classic, AVG, Avast, some kinda antivirus program like that and do a full system scan.

**Lusted** · July 18, 2006, 06:30 PM

Well i tried to download some anti-malware software and my computer restarted on me when i tried to install it.

I need help killing this thing completely, i've found where most of the files are but i can't delete them.

Please, everyone, any suggestions you have are welcome.

**Maron** · July 18, 2006, 06:38 PM

I had the exact same situation about 7 weeks ago.

I downloaded ad-aware and spybot to locate the files and delete what I coud

then I downloaded HijackThis and deleted the remaining items that were harmful

this cleared it up

hope this helps,
-Maron

**Lusted** · July 18, 2006, 07:56 PM

Managed to kick it ass myself, bloody anti virus and anti spware software didn't pick up on it at all. All im left with is a .dll that i cannot remove, is called isaddon.dll, anoyone have any ideas on how i can kill this final bit.

**Spiff** · July 18, 2006, 08:15 PM

You have to be careful when downloading codecs, a lot of people look for them so a lot of people see it as an opportunity to infect people with viruses.

I installed the 'storm codec pack' (well, custom install of the ones i needed) and it seems to have done the job fine, with no detected spyware and such.

Anyway.. hmm try booting into safe mode and deleting it that way perhaps

**Zuwxiv** · July 18, 2006, 08:43 PM

Try Avast! Antivirus, it's my favorite. HijackThis is also an excellent program.

With some good antivirus programs, you won't have to worry that much, but in general always be careful downloading anything online. And almost always, if it asks you to install something it has some malware.

**Lusted** · July 19, 2006, 09:11 AM

Okay most of it is gone, but ive still got an icon for it on the toolbar, wth the volume control and time etc, does anyone have any ideas on how to kill it.

**wipeout140** · July 19, 2006, 09:15 AM

System restore before you download it???

**Lusted** · July 19, 2006, 09:26 AM

How would i go about doing that, and how would i know when the last system restore was saved as it were.

**matereo** · July 19, 2006, 09:40 AM

Id also switch to linux for webrelated pc use. If not... heres a combo of programs that seem to make things on windows pcs alot easier. Get Avg free antivieus, get kerio free personal firewall, and finally get two small apps. from arovax called the arovax shield and the other antispyware.

My mother and sister insists on using Windows and ive found this quartet of programs making my rescue efforts very small!

**matereo** · July 19, 2006, 10:33 AM

First of all what is the exact name of this so called security center? If you give me the exact name of it i might help you to manually remove most of it. Meanwhile download and try Adaware and Arovax antispyware.
Have you tried resetting your computer to an earlier date? ... If any of this works id recommend using the quartet of programs ive listed below, they are also free.

Originally Posted by matereo

Id also switch to linux for webrelated pc use. If not... heres a combo of programs that seem to make things on windows pcs alot easier. Get Avg free antivieus, get kerio free personal firewall, and finally get two small apps. from arovax called the arovax shield and the other antispyware.

My mother and sister insists on using Windows and ive found this quartet of programs making my rescue efforts very small!

Best wishes!

**Amroth** · July 19, 2006, 09:43 AM

If you try to delete the file, but it won't let you, try using Unlocker. I'd also recommend using Avast!, Ad-Aware SE Personal, Spybot - Search & Destroy, SpywareBlaster & Microsoft Windows Defender.

**Halie Satanus** · July 19, 2006, 09:35 AM

Go to start/performance and maintenance and on the left system restore, out of interest does a window come up when you try to log into your e-mail??.

**Sammur-amat** · July 19, 2006, 09:38 AM

have you ever try "win patrol" ?
and dont use sys restore if you not making restore points on regular basis...it screw whole win instalation...you can try safe mode or write exactly the path of dll and then load win from cd ..start cmd and delete it ...

**Lusted** · July 19, 2006, 11:28 AM

Im already using Spybot search and destroy, everything has gone now apart from the icon on the toolbar, and a toolbar for internet explorer, ill try those programs you mentioned.

The files it installed and i've managed to delete are:

isaddon.dll
isamonitor.exe
isamini.exe
pmsngr.exe
pmmon.exe
ismon.exe
ishost.exe

It installed some of these to the system folders, but most to a folder called Media Codec in program files.

**matereo** · July 19, 2006, 11:59 AM

Good to hear you are on your way to a cleaner computer...
When using the arovax antispyware remember to mark "scan selected folders" and below the partitions that are hd's...

**Carsomyr** · July 19, 2006, 12:01 PM

Originally Posted by Lusted

Okai was watching a video and it said i needed to download the latest codex to view it, but instead of it being codex, it turns out to be this Security Center thing which i think is Spyware, and im trying to remove it from my computer, buts added in a lot of .exes to the processes list in task manager.

Dammit, just did a google search of one of the processes, its malware, im downloading some software to try and take care of it, but ill need your advice.

I got the SAME thing the other day and YES, I can confirm you it's adware/spyware desguised as Windows Security Center crap. You're going to have one hell of a time getting rid of it. I reformatted because I had all sorts of **** already in my system, but I couldn't get the 'security' schtuff to go away, it kept coming back.

**matereo** · July 19, 2006, 01:27 PM

Reformatting is always best help, but afterwards i think the software i recomended are good first intsalls for a new clean system.

**Lusted** · July 21, 2006, 06:06 AM

Hey guys, just one final question, where is the folder that stores what is kept n the toolbar, cause i need to go in there and remove the last few elements of this thing.