I've been hit with some type of virus that has taken over my Internet Explorer. Every time I reboot my computer I'm directed to a website http:// clicks.spazbox.net/mt.html/ and a Trojan virus (of differing types) is inserted into my system.
On each occcasion various malicious programs have been installed onto my hard drive, my registry has been corrupted and my startup files have malware items.

I've literally spent hours with both Trendmicro and Microsoft and they have no solution other than re-installing WIndows. In addition I've run, on multiple occasions, Spybot Search & Destroy, two other Spyware programs and sysclean. Nothing helps!

Anybody out there ever heard of spazbox and know what to about it?

Thanks,
Gary

Hi I have the same problem, have you solved it ?

>:(
Same problem for me. I tried several things but was unable to avoid that at every reboot, my PC connects with spazbox...
Let me know if you have a solution!!

:-[ i got it 2, on a customers pc, been fighting it 4 3 days !!!! :'( >:(

I've got a laptop with this SpazBox - spyware or virus?
AdAware and SpybotSD aren't getting rid of it and McAfee doesn't recognize it. Its very disturbing!
Anyone have a solution? Please email me if you do -
[email protected]

Thanks!
Jay

I've got a solution, more or less.

After finally talking to a Level 2 Tech at TrendMicro he sent me a new vesion of their software that provides internet security, had me download a registry cleaner and had me run CW Shredder and Spy Sweeper.

The bottom line is this, once you've got this thing you have to clean out your machine with the above mentioned tools, install software that essentially disables Internet Explorer by blocking Spazbox (and all other sites) from coming through IE and install a different browser with better security.

I installed Mozilla Firefox, but I've heard Opera is more secure.

The bottom line is that, once this thing hits you and unless you want to spend hours manually cleaning out your Registry, you have to say goodbye to Internet Explorer.

The only lingering effects I have right now is that, on startup, a TrendMicro page comes up indicating that Spazbox is being blocked and I've got some residual file damage from the viruses that brought this little goodey into my machine. Other than that, every time I run a virus check or Spy Sweeper the results come up clean.

As I indicated initially, there are no good solutions to this problem, but the one I implemented was at least liveable.

Hopefully you find this helpful

;D I found a HIDDEN :o partition that the PC was booting from and emulating(4 lack of a better term) XP, so no matter what I did to clean xp, when web access was enabled it reloaded all the viruses, mal/ad/spy-ware...
Good luck all.. . 8)

Hi,

I had the same Problem.But I finnally got rid of it ;D

I found this link and read what I had to do.

http://www.trojaner-info.de/hijacker/escan.shtml

It worked with kav for me.

I got rid of it by opening Windows Task Manager and stopping a process called asetup.exe. Then I opened up Windows Explorer and found the asetup.exe file in the root of the C: drive and deleted that.

Thanks for the great tip!!

I had asetup32.exe on the root. I checked my other Windows2000 boxes and they didn't have that file.
I renamed it Xsetup32.xxe in case I actually needed the file - rebooted and the spazbox /browser thing did NOT come up!! Wonderful!

Earlier I did try some other packages recommended but they did not work - only this asetup.exe solution seems to work.

Hallo best computer people,

Beat that window with http://clicks.spazbox.net/mt.html
It cost my 2 evenings of my time. But...

:)
I have found the sollution. It's Working with Windows XP Home edition.

First: set de system recovery off

Start regedit

Go to:
HKEY_LOCAL_MACHINE->Software->Microsoft->Windows->CurrentVersion->Run

Delete the following 3 regkeys
REGSRV32.EXE
C:\asetup32.exe
Rundll32.exe "C:\WINDOWS\Download Program Files\bridge.dll", Load

Go to:
HKEY_LOCAL_MACHINE->Software->Microsoft->Windows->CurrentVersion->RunServices

Delete the following regkey
REGSRV32.EXE


Exit regedit

Turn off your machine

Wait a few seconds and start your PC again.

Don't forget to set the system recovery back to on.

Succes

SP2 will solve all probs.

Regards~

In my occasion due to "spazbox" my PC makes autodial to the internet every time that I disconnect from the internet. I found TWICE a file that is called dasetup.exe.
C:\Windows\Temp\IXP000.TMP
And also at the location
C:\Program Files\Common Files\Microsoft Shared\dasetup
May I delete it to get rid of spazbox?

Yes delete the whole temp folder.
Temp stands for temporary, in other words duplicate.
After that delete the dasetup. I'd say its prob

Just back up any data that's valuable. Still get probs then get back to us.

Regards~alicka

OK,thanks a lot for your advice, I 'll try it now.

Perhaps you could also give me some piece of advice
For another problem:

What about a file called
W32usb2.exe in the system folder
Which is infected by W32.Spybot.Worm?
Norton was unable to repair this file.

I guess the only solution is to backup my files
Ang format my PC?
:( That really makes me angry!!

Hi all

I've also been battling with this for a couple of days now! So far I've got PestPatrol and Spy Sweeper to wipeout the spy/ad-ware generated by it and my FireWall stops it starting with a little manual help. Not a very satifactory way to deal with it really.

I'm using xp pro and don't seem to have the same files in the registra as Marc.

For example my reg has a arsetup32.exe instead of a asetup32.exe file. Does anybody know if these are the same or not?

Anybody managed to remove this from an XP Pro machine yet?

This is a very nasty beast.

I have seen it on my system as arsetup32.exe also. The other important file is regsrv32.exe
I could not locate the other file names as described in the earlier posts.

I did a search through my registry for regsrv32.exe and found the registry riddled with it. Many more entries than described in previous posts. I used regalyzer from http://www.safer-networking.org to search and delete these entries.

I can clean these up but it keeps reappearing. It is shutting down attempts to start up the task manager with Ctrl-Alt-Del (is there another way to get to the task manager in XP home?). It also closes down attempts to start Vet or the firewall (Sygate)
I'm running Spybot but it doesn't seem to be able to kill it off. Adaware no good either.
Getting to the point where we Format c: and start all over again. Painful.

Just found some relevant info on regsrv32.exe. Seems it is a virus. Beware, there is a valid system file called regsvr32.exe (note that the v and r are swapped). As for regsrv32.exe this file is the virus DDoS-Apbot@MM. Here's a reference link if you want to read about it:

http://vil.nai.com/vil/content/v_99144.htm

There are some tips for cleaning it at this site: http://forums.thetechguys.com/archiv...hp/t-5453.html

This appears to be a fairly old virus (2001) and discussion on the above pages does not mention the arsetup32.exe file. It may be that it is a new variant of an old virus.

I'm going to give it a try...

All gone now! :D I hope

I ended up having to delete arsetup.exe from windows directory and winboot32.exe and winmom32.exe from run and run once registars

I've renamed the file kla.exe in windows directory - I think this file was also involved but not 100% sure. Anybody know what it does?

Hmmm nasty little bugger >:(

My customers system is so riddled with spy/malware that I can't open regedit or task manager.

A search of the system does reveal arsetup.exe in the root of C:/ but I can't delete it without ending the process - which I can't do as I can't open Task Manager

Any ideas anyone?

??