Spypal Thinkertec

[ebionite1]

I downloaded this thinking it was a child monitoring program. But I cannot access it anymore and it randomly opens up and asks to upgrade.I tried contacting the company a few times, and they will not reply. I forced it to install by turning off my malwarebytes.

There is no uninstall and it is hidden, as well as not in the control panel.

 

Malwarebytes doesn't pick it up as a virus anymore though and won't remove it

 

Thanks

[Maurice Naggar]

Hi,       

My name is Maurice. I will be helping and guiding you, going forward on this case.

Let me know what first name you prefer to go by.   

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me. 

Please only just attach   all report files, etc  that I ask for as we go along.

Please download the Farbar Recovery Scan Tool 64-bit and save it to your desktop.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

 

After saving

Right-click on FRST64.exe and select Run as Administrator to start the tool , and reply YES to allow it to proceed and run.

 

_Windows 10 users will be prompted about Windows *SmartScreen protection* - click line More info information on that screen and click button Run anyway on next screen._

Click YES when prompted by Windows U A C prompt to allow it to run.

Note: If you are prompted by Windows SmartScreen, click More info & followup & choose Run anyway.

 

Approve the Windows UAC prompt on Windows Vista and newer operating systems by clicking on Continue or Yes. 

 

Click Yes when the *disclaimer* appears in FRST.

The tool may want to update itself - in that case you'll be prompted when the update is completed and ready to use.

 

Make sure that Addition options is *checked* - the configuration should look exactly like on the screen below (do not mark additional things unless asked).

Press Scan button and wait.

The tool will produce 2 logfiles on your desktop: FRST.txt , Addition.txt 

Click OK button when it shows up. Close the Notepad windows when they show on screen. The tool saves the files.

 

Please attach these 2 files to your next reply.

Thank you.

 

 

[ebionite1]

thanks

Addition.txt FRST.txt

[Maurice Naggar]

Thank you for the FRST reports.  Now we want to be sure that Windows shows all hidden & system folders.

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

 

Please read the guide at Tenforums.  Need to be sure that Windows is set to show ALL Folders, including system folders, plus also hidden folders & files.

 

Please confirm after that is done.

[Maurice Naggar]

Question:  Did you knowingly & on your own volition, install Kidlogger Monitoring Agent ?

[Maurice Naggar]

Hi. I have here a custom script intended to help on your main issue of the rogue app.

The script Fixlist.txt  needs to be saved to the same folder that contains FRST64.exe   /  you have yours on Downloads.

 

The custom script on this post is ONLY for this machine and NO other.   

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

 

If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,  please disconnect any of those.

 

The system will be rebooted after the script has run.

 

Please save the (attached file named) FIXLIST.txt   to the  Downloads folder

 

Start the Windows Explorer and then, to the Downloads folder.

 

RIGHT click on  FRST64.exe   and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run the tool. If the tool warns you the version is outdated, please download and run the updated version.

IF Windows prompts you about running this, select YES to allow it to proceed.

 

IF you get a block message from Windows about this tool......

click line More info information on that screen

and click button Run anyway on next screen.

 

on the FRST window:

Click the Fix button just once, and wait.

 

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. This run here should be fairly quick.

If you receive a message that a reboot is required, please make sure you allow it to restart normally.

The tool will complete its run after restart.

When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

 

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

Please know this will do a Windows Restart.   Just let it do its thing.  

 

Do let me know how things are overall,  after all this.

Fixlist.txt

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks