Results 1 to 5 of 5
  1. #1
    Junior Member
    Join Date
    Apr 2005
    Posts
    29

    Default Nyeagghhhhh! Stupid "click me" spyware!!!

    My fiance's parent's computer seems to have a spyware/viral infection of some sort.
    Specs: Dell dimension purchased from warehouse (can't remember exact name but it's the one with the pentium 4 2.4ghz and fx5200 128mb video card 256 mb ram windows xp home /w sp2 installed. 40gb hdd etc etc...)

    Ok, onto the problem. It installs green "click me" and "uninstall click me" icons on the desktop. I have been informed that the owners of the computer clicked on the uninstall icon thinking it would make it go away This obviously didn't unistall it lol. These icons execute Something in the system32 folder called new_zealand.exe -n or new_zealand -s or similar extensions. Also, the computer tries to dial an international number and pop-ups occur regulaly, probably every minute or so. I have tried adaware, spyware, avg, xosoft, of which none remove it, running the programs in both normal and safe modes. Have also gone through msconfig and made sure that new_zealand.exe is unchecked so it doesn't start up next time, as well as killing any running processes that seem suspect. But every time the computer is rebooted everything reverts to normal. And yes, i disabled system restore while running the anti-virus/spyware. Also, using zone alarm as the firewall. All software is updated to latest definitions etc....

    Please help me!!!!! Are there any hidden processes or items in the msconfig that might be hidden from view? Also, is it usual to be running many different versions of svchost in the processes window? I'm assuming it's nothing just wondering. Does anyone know how to get rid of this???? If you do thanks in advance for the help.

  2. #2
    Senior Member
    Join Date
    Dec 2004
    Posts
    276

    Default Re: Nyeagghhhhh! Stupid "click me" spyware!!!

    Put new_zealand.exe on Google

  3. #3
    Member
    Join Date
    Dec 2004
    Location
    NZ
    Posts
    44,855

    Default Re: Nyeagghhhhh! Stupid "click me" spyware!!!

    Get Hijackthis and run it / do a scan. And post the log here.

    BUT that NZ.exe looks like a premium adult dialer.

  4. #4
    Moderator Jen's Avatar
    Join Date
    Dec 2004
    Location
    Auckland
    Posts
    8,236

    Default Re: Nyeagghhhhh! Stupid "click me" spyware!!!

    It is an adult site dialer. Symantec have manual removal instructions so you might need to go hacking the registry to remove any references hidden there. Removal Instructions.

    Get them to keep the computer offline (remove modem lead from phone socket) until you can remove it for them to prevent high toll bills if it does manage to dial out.

  5. #5
    Junior Member
    Join Date
    Apr 2005
    Posts
    29

    Smile Re: Nyeagghhhhh! Stupid "click me" spyware!!!

    Thank you for the help. In the end i just went through the registry properly and removed every little trace of it, as well as removing all references out of the prefetch folder. After 3 reboots, with no popups, stupid click me icons or international dial attemtps it's safe to say that it's gone. Ta.

Similar Threads

  1. Replies: 6
    Last Post: 09-06-2008, 12:13 PM
  2. Replies: 10
    Last Post: 07-12-2006, 09:17 PM
  3. Replies: 1
    Last Post: 01-04-2006, 08:02 AM
  4. "right click" on properties does not work
    By allanl in forum PressF1
    Replies: 1
    Last Post: 23-09-2005, 12:27 AM
  5. Replies: 12
    Last Post: 09-07-2005, 12:01 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •