adware threat COMET CURSOR HELP

Rann_03 · #1 08-01-2005, 03:04 AM

hello , downloaded first the spysweeper by webroot. it removed comet cursor already. but the thing is when i dloaded the spy doctor i just saw that it was still there and it was quarantined once again. i tried locating the exact file in the program of my PC but i can't seem to find it. i uninstalled the program long time ago but how come it's still there? hope that someone could help me out this is the CS log i got from the scan.

:

5/25/2005 03:21:43 - [PID=0x30C, TH=0x34C] +++++++ Starting C:\Program Files\Internet Explorer\iexplore.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:21:51 [PID=0x30C, TH=0x34C] - Error in File = D:\projects\all\platform\Source\core\BHO1.cpp, Line number = 2937
Double comet message COMET_LOADLIBSET sent to BHO. Ignoring second message...
5/25/2005 03:21:53 [PID=0x30C, TH=0xB94] - Update.js: Download Error:adzap.html Downloaded:11242 Expected:10542
5/25/2005 03:21:53 [PID=0x30C, TH=0xB94] - Update.js: Update Aborted
5/25/2005 03:21:55 [PID=0x30C, TH=0xB94] - Update.js:Error Copying File:C:\PROGRA~1\Comet\Update\funbutton.bmp To:C:\PROGRA~1\Comet\Products\FunButton\funbutton. bmp
5/25/2005 03:21:55 [PID=0x30C, TH=0xB94] - update: Update Transaction Errors: ERROR_FILE_COPY
5/25/2005 03:21:56 [PID=0x30C, TH=0xB94] - Update.js: Download Error:adzap.html Downloaded:11242 Expected:10542
5/25/2005 03:21:56 [PID=0x30C, TH=0xB94] - Update.js: Update Aborted

5/25/2005 03:22:17 - [PID=0x3CC, TH=0xBD4] +++++++ Starting C:\PROGRA~1\Comet\bin\comet.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:22:34 [PID=0x3CC, TH=0xBD4] - Error in File = D:\projects\all\platform\Source\CSEng\CSHost.cpp, Line number = 572
Error in c:\progra~1\Comet\Temp\3CC_2.htm at line 141, character 4: 'docObj.all.bannerimage' is null or not an object (0x800A138F)

5/25/2005 03:24:33 - [PID=0xC80, TH=0x6FC] +++++++ Starting C:\Program Files\Comet\Bin\comet.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:24:45 [PID=0xC80, TH=0x6FC] - Error in File = D:\projects\all\platform\Source\CSEng\CSHost.cpp, Line number = 572
Error in c:\progra~1\Comet\Temp\C80_2.htm at line 141, character 4: 'docObj.all.bannerimage' is null or not an object (0x800A138F)

5/25/2005 03:28:06 - [PID=0xDF8, TH=0x854] +++++++ Starting C:\Program Files\Comet\Bin\comet.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:28:42 [PID=0xDF8, TH=0x854] - Error in File = D:\projects\all\platform\Source\CSEng\CSHost.cpp, Line number = 572
Error in c:\progra~1\Comet\Temp\DF8_2.htm at line 141, character 4: 'docObj.all.bannerimage' is null or not an object (0x800A138F)

5/25/2005 03:30:17 - [PID=0x83C, TH=0x434] +++++++ Starting C:\PROGRA~1\Comet\Bin\comet.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:30:19 [PID=0x83C, TH=0x434] - Error in File = D:\projects\all\platform\Source\core\statcbk.cpp, Line number = 787
Http SendRequest failed with error code 0x80004004 for file http://update.cc.cometsystems.com/cc...01141390100231

5/25/2005 03:30:20 - [PID=0xA98, TH=0x7DC] +++++++ Starting C:\PROGRA~1\Comet\Bin\comet.exe
Production build. CSCORE: 4.3.333.276
5/25/2005 03:30:22 [PID=0xA98, TH=0x7DC] - Update.js: Download Error:adzap.html Downloaded:11242 Expected:10542
5/25/2005 03:30:22 [PID=0xA98, TH=0x7DC] - Update.js: Update Aborted
5/25/2005 03:30:22 [PID=0xA98, TH=0x7DC] - update: Update Transaction Errors: ERROR_FILE_DOWNLOAD
5/25/2005 03:30:22 [PID=0xA98, TH=0x7DC] - Update.js: Download Error:adzap.html Downloaded:11242 Expected:10542
5/25/2005 03:30:22 [PID=0xA98, TH=0x7DC] - Update.js: Update Aborted

Rann_03 · #2 08-01-2005, 03:17 AM

plus i cant seem to find which program it was exactly. i can't find it please help

Southern · #3 08-02-2005, 12:13 PM

Use proven spyware programs, like Spybot:Search & Destroy, Adaware or Spyware Blaster, which are more effective at getting rid of spyware. Google is your friend, use it!

BTW, If you use Bitcomet, I recall that some spyware removers detect Bitcomet as spyware by accident, if that helps at all!