PWS.LDPinchIE

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Candace Sparks - 21 Jun 2007 05:17 GMT

I cannot get rid of this trojan. Spybot fixes it, but as soon as I restart
the computer, it is back in the registry. When I open IE 7, I get about 7
or 8 Internet Explorer Windows opening.

Does anyone have a fix for this?

Thank you in advance!

Candace Sparks

Reply to this Message

C J. - 21 Jun 2007 05:46 GMT

> I cannot get rid of this trojan. Spybot fixes it, but as soon as I
> restart the computer, it is back in the registry. When I open IE 7, I
[quoted text clipped - 5 lines]
>
> Candace Sparks

You say you ran spybot S&D... did you do your scan for this pest in safe
mode? Also Is your Anti Virus program up to date?

Reply to this Message

Candace Sparks - 21 Jun 2007 06:02 GMT

I did run spybot in safe mode. Antivirus program is up-to-date

>> I cannot get rid of this trojan. Spybot fixes it, but as soon as I
>> restart the computer, it is back in the registry. When I open IE 7, I
[quoted text clipped - 8 lines]
> You say you ran spybot S&D... did you do your scan for this pest in safe
> mode? Also Is your Anti Virus program up to date?

Reply to this Message

Leonard Grey - 21 Jun 2007 06:05 GMT

Some of the information here should help:
http://www.google.com/search?hl=en&q=PWS.Ldpinch&btnG=Google+Search

---
Leonard Grey
Errare humanum est

> I cannot get rid of this trojan. Spybot fixes it, but as soon as I restart
> the computer, it is back in the registry. When I open IE 7, I get about 7
[quoted text clipped - 5 lines]
>
> Candace Sparks

Reply to this Message

Candace Sparks - 21 Jun 2007 15:17 GMT

Spybot finds PWS.LDPinchie, fixes it. It is a registry key under
HKLM-system-curentcontrolset003-services-rpcapi. I check the registry after
it is fixed, and it is not there. I reboot the computer and it is back.

> Some of the information here should help:
> http://www.google.com/search?hl=en&q=PWS.Ldpinch&btnG=Google+Search
[quoted text clipped - 12 lines]
>>
>> Candace Sparks

Reply to this Message

Frank Saunders, MS-MVP OE/WM - 22 Jun 2007 02:11 GMT

> Spybot finds PWS.LDPinchie, fixes it. It is a registry key under
> HKLM-system-curentcontrolset003-services-rpcapi. I check the registry
[quoted text clipped - 16 lines]
>>>
>>> Candace Sparks

run HijackThis; http://aumha.org/downloads/hijackthis.zip
HijackThis - Tutorial & FAQ;
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

Register here: http://aumha.net/profile.php?mode=register
Once you have received your registration confirmation, post your HJT
log here: *(for expert analysis)*
http://aumha.net/viewforum.php?f=30
****NOT in this newsgroup!*****

Please see http://aumha.net/viewtopic.php?t=4075 and
http://aumha.org/a/quickfix.htm before posting to the forum.

HijackThis tutorial:
http://aumha.org/a/hjttutor.htm

Signature

Frank Saunders, MS-MVP OE/WM
Do not send mail.

Reply to this Message

PA Bear - 22 Jun 2007 20:40 GMT

>> Spybot finds PWS.LDPinchie, fixes it. It is a registry key under
>> HKLM-system-curentcontrolset003-services-rpcapi. I check the registry
[quoted text clipped - 32 lines]
> HijackThis tutorial:
> http://aumha.org/a/hjttutor.htm

cf. http://aumha.net/viewtopic.php?t=27614

Signature

~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org

Reply to this Message

Ildhund - 22 Jun 2007 21:26 GMT

>>> Spybot finds PWS.LDPinchie, fixes it. It is a registry key under
>>> HKLM-system-curentcontrolset003-services-rpcapi. I check the registry
[quoted text clipped - 34 lines]
>
> cf. http://aumha.net/viewtopic.php?t=27614

That was one hell of a saga! Is the machine clean now?
And who pays you for such painstaking efforts to help the innocent? I do
hope you get your reward in heaven, if not before.

Signature

Noel

Reply to this Message

PA Bear - 22 Jun 2007 22:26 GMT

<snip>

>>> run HijackThis; http://aumha.org/downloads/hijackthis.zip
>>> HijackThis - Tutorial & FAQ;
[quoted text clipped - 15 lines]
>
> That was one hell of a saga! Is the machine clean now?

We'll see.

> And who pays you for such painstaking efforts to help the innocent? I do
> hope you get your reward in heaven, if not before.

As in these newsgroups, we're all volunteers in that forum. Thanks for the
feedback.

Signature

~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org

Reply to this Message