Hello,

yesterday I removed MSN Messenger Plus's sponsor and ever since I did that 2 new High Danger leval exe's wear useing the MessengerPlus folder to get in.  The exe's are called qiibdsvc.exe and yxfadrbf.exe.  Now are these something msn pessenger plus purpasly lets in just like the sponsor or is this an actual privasy threat?

EDIT: can someone move this to help and support I meant to post that there nd posted it here by misstake

The sponser does not install anything additionally if you remove it,

did you remove it correctly following Patchou's instructions?

Secondly run Spybot and Adware to check.

yes and my spyware scaner is also an adware scaner and the 2 exe's seem to be appiering as adware

yeh becuase it could install the sponser and thse are false reading just dont worry you have got rid of the sponsor 100%

http://shoutbox.menthix.net/showthread.php?tid=48356 that thread trys to explain everythign about the sponsor

hmm ok but I just noticed im still getting that blue thing on the bottem of my browser that has a search bar on it some kindof casino link and stuff like that on it (ill post a pic of it when it shows up again) and the links in my favortes the sponsor added that im not able to delete.  How come i still get those even though the sponser is gone.  also after doing another scan i found something called lop.com (plus's sponsor site I believe) appiering as a tracking cookie are they still allowed in even though they were deleted?

Okay, as far as i know these files should not be there since the sponsor installs to a different folder. Also they are not messenger plus! files either.

Could this possibly be a new virus trying to frame patchou? o.O

I doubt that it is, he probably hasn't uninstalled the sponsor properly.

Saviour, follow these instructions exactly, don't take your own roots.

Download the latest Messenger Plus! then install it with the sponsor, then after it has fully installed, restart your computer, and then go to Control Panel > Add/Remove Programs, then Uninstall the Messenger Plus! sponsor via. the Messenger Plus! uninstaller.

quote:

---

Originally posted by traxor
I doubt that it is, he probably hasn't uninstalled the sponsor properly.

---

close internet expoler when doing this and other programs using it e.g msn does use it for cathe

I didnt take my own roots I did excatly what it said

I went to my control panel, clicked ad or remove programs, looked for MSN Messenger Plus, clicked change/remove, selected remove sponsor, typed in the code it asked me to type in, then clicked finish. Excatly what it said to do to remove it.  I even went back and checked just t make sure it uninstaled and it did.

quote:

---

Originally posted by Absorbation
close internet expoler when doing this and other programs using it e.g msn does use it for cathe

---

made sure plus was exited completely? even using Ctrl Alt Del to check it isnt running?

did everything its gone complety but parts of the sponsor refuse to leave and those 2 exe's are useing the plus folder to get in

quote:

---

Originally posted by ShawnZ
Yes, but, again, the sponsor isn't suppose to create anything in the msgplus folder, is it? And those files aren't created by messenger plus either.

---

quote:

---

Originally posted by ShawnZ
Yes, but, again, the sponsor isn't suppose to create anything in the msgplus folder, is it? And those files aren't created by messenger plus either.

---

quote:

---

Originally posted by ShawnZ
Yes, but, again, the sponsor isn't suppose to create anything in the msgplus folder, is it? And those files aren't created by messenger plus either.

---

quote:

---

Originally posted by ShawnZ
Yes, but, again, the sponsor isn't suppose to create anything in the msgplus folder, is it? And those files aren't created by messenger plus either.

---

ok here is a shot of what file the Adware is useing to get it (thank god I have fast fingers)



is that file suposed to be there or is something the sponsor added

Don't use any sponsor removal programs to uninstall the sponsor.

Unless you have installed the sponsor, then all the files there, will be required.

There's something I'd like to clarify with you... what I understand from your posts is that you have some files in the Messenger Plus! directory that are detected as potentially dangerous. Not even the sponsor files are added to the Messenger Plus! directory so if you have anything there that's considered a threat by anyone (except for the stupid MS Anti-Spyware of course), then you have another problem and uninstalling Messenger Plus! won't change anything to the problem.

Please give us as much information as possible about these files. Thank you.

I just decided to uninstal Plus completly and all the problems stoped now because my Ad-ware scaner cant find anything that is a threat anymore so owell I just wont use plus

Its this afaik: http://shoutbox.menthix.net/showthread.php?tid=48838

those seem to be exe's we've seen it make