Spyware Warrior

wawadave · Posted: Sun Aug 22, 2004 11:02 pm Post subject: eSellerate

helo
i found eSellerate in my registry and i think its some kind of tracking or addware? any one know of it???
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

wawadave · Posted: Sun Aug 22, 2004 11:07 pm Post subject:

found anther one "black sun" ring a bell?
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

wawadave · Posted: Sun Aug 22, 2004 11:09 pm Post subject:

and last but not least "j.river"
and i have not d/led j.river media center?
all google found that even could have made any sence?
thx!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Mon Aug 23, 2004 4:15 pm Post subject:

Don't know, Dave, but I'll see what I can come up with for you.
I just got home, been away for an overnighter or I'd have seen this sooner.

How's yout ht log look? Anything in there??
_________________
Proud member of the Chest Zipper Club!

wawadave · Posted: Mon Aug 23, 2004 5:26 pm Post subject:

hello
i,ll do a hijack log and look it over was hopeing some one would have known for sure what they were i did googles on them. that esellerate is some kind of add ware for sure!!!!and the promote them selfs quite a lot. get several pages of hits.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Mon Aug 23, 2004 5:50 pm Post subject:

OK Dave. Drop the logfile in here, or PM it to me if you want to keep it private.
In your case, I doubt that anyone will object to a PM fix Wink

_________________
Proud member of the Chest Zipper Club!

wawadave · Posted: Mon Aug 23, 2004 6:26 pm Post subject:

the hijack log had hosts blocking msn as home page in ie which i don,t use.removed those. removed a panda xactive that was not needed.
every thing in there i new what they were for but these two
O12 - Plugin for .bcf: D:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB
look like any thing out of the ordnary?
i do spend 4 hours every week reading solved hijacks in verius forums. to see what the latest exploits look like and whats being done to get rid of the. that don,t make me 100% at reading logs by any means.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Mon Aug 23, 2004 6:55 pm Post subject:

You're on the ball Dave, I have no doubts about that.

Have to ask though....I know you run partitions and different OS Boots.
NPBelv32.dll

http://www.dll-files.com/search.php?s=NPBelv32.dll shows no available files
http://support.microsoft.com/default.aspx?scid=http%3a%2f%2fsupport.microsoft.com%2fservicedesks%2ffileversion%2fdllinfo.asp&fp=1 also shows nothing.

Google shows NPBelv32.dll as part of Belarc Advisor
Search here http://forum.aumha.org/viewtopic.php?t=7128
I trust Alumha Wink

That's my 3-search rule covered Smile

Next:
http://www.drivershq.com/ is the HomePage
(Regarding O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} (DD_v4.DDv4) - http://www.drivershq.com/DD_v4.CAB)

Looks like you downloaded a new Driver for some piece of Hardware.
I generally use http://www.driverguide.com with great success, but...haven't tried any from drivershq yet. Haven't needed to.

Otherwise, you look good, from what you tell me Wink

_________________
Proud member of the Chest Zipper Club!

wawadave · Posted: Mon Aug 23, 2004 7:09 pm Post subject:

ok systems clean see why i don,t do hijack logs. i would have killed belarc and driver program. lol.
thx for your time in this!
i could of google i just wanted a first glance opinion. than i would have googled but thank you!
still don,t shead light on esellerate! this one has me spooked!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Mon Aug 23, 2004 7:23 pm Post subject:

I'll poke around on esellerate.

I'll need to know this though:
(and don't fix/change anything!)

Start>Run type in Regedit.
Edit>Find type in esellerate

Any registry entries?

More info:
Esellerate and Paypal appear to be hand-in-hand
http://www.mpegware.com/whatisesellerate.htm

Owned by eBay, known partners with doubleclick, etc.

Interesting!
_________________
Proud member of the Chest Zipper Club!

3162 · Posted: Mon Aug 23, 2004 7:38 pm Post subject:

Even more:

esellerate is a paid program
http://store2.esellerate.net/store/catalog

From the eSellerate link:

wawadave · Posted: Mon Aug 23, 2004 8:28 pm Post subject:

ok i logged into ebay aweek ago so how in hell did they get into my reg??? this is bothering me. i don,t trust ebay ether.
thank you again!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Mon Aug 23, 2004 8:36 pm Post subject:

Start>Run and type in Regedit.
Edit>Find and type in esellerate

Any registry entries?
If so, what are they?
What's in the left pane and what values are in the right pane?

Help me here Dave, I know that you can get into regedit Wink

_________________
Proud member of the Chest Zipper Club!

wawadave · Posted: Mon Aug 23, 2004 10:09 pm Post subject:

searching the reg dose not find esellerate but manual search does!!
and in the reg enteries is this site
http:store.eSellerate.net/s.asp?buy=y&h= and 40 odd more figures

so regsearch don,t find it whats up something must be hideing itor needs case sencitive!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

wawadave · Posted: Mon Aug 23, 2004 10:14 pm Post subject:

ok black sun is x fonter program i got from link here when this forum first opened! its acounted for.
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd

3162 · Posted: Tue Aug 24, 2004 12:30 pm Post subject:

regedit is partially case sensitive, I believe, and the correct spelling appears to be eSellerate.

Are those items you're worried about in the IE History pane of regedit? If so, you can safely delete them in regedit.
I'm guessing that they are cached URL's.
_________________
Proud member of the Chest Zipper Club!

wawadave · Posted: Tue Aug 24, 2004 1:47 pm Post subject:

tried both eSellerate and esellerate dose not find.
it in hkey loacal machine software.
won,t delete till i know for sure what its conected too.
thx!
_________________
RFID tags! SPYWARE
Tired of proprietary Cor-pirationware?
http://www.openoffice.org/
Installing Vista http://tinyurl.com/2l9qyd