Rybit
03-01-2005, 07:32 PM
A new computer security threat in the form of spyware has been identified from a company called MarketScore. This software runs at startup of the computer and collects information entered into on-line forms as well as re-routing all web traffic from the computer through MarketScore proxy servers which give the company the ability to view all information sent to/from a user’s web browser including traffic that would normally be protected by https/SSL encryption. The information that can be collected through secure connection includes userid/passwords, social security numbers, credit card information, etc. The most likely way the software is installed is through a file sharing software called iMesh.
Remove the spyware and restore normal functionality by following this process. (http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10289035.html)
After removal of the software, change all passwords that might have been entered on the computer.
Manual Removal
Removing this software does not require a reformat of the computer. Three steps are required to remove this software from your computer.
Step 1 - Run the MarketScore Uninstaller
Go to the Start Menu and click Run.
Type command and press Enter.NOTE: Due to the different versions of MarketScore, you may have to try running a number of commands before the uninstall program will run. Try each of the commands in the order listed until you do not get an error message. This will then run the uninstall program.
On Windows XP or 2000, try the following commands:
mksc.exe -bootremove -uninst:RelevantKnowledge OR
ossproxy -bootremove -uninst:RelevantKnowledge OR
NSCheck.exe /uninstall
On Windows 95/98/ME, try the following commands:
%WINDIR%\SYSTEM\mksc.exe -bootremove -uninst:RelevantKnowledge OR
%WINDIR%\SYSTEM\ossproxy -bootremove -uninst:RelevantKnowledge OR
%WINDIR%\SYSTEM\NSCheck.exe /uninstall
Step 2 - Run Spybot: Search and Destroy
The MarketScore Uninstaller does not remove any registry entries that MarketScore installs. Spybot will find these entries and remove them from your computer. You can find information on how to install and run Spybot here.
Step 3 - Remove Security Certificates from your web browser
To remove the security certificates in Internet Explorer, use the following steps:
Click on the Tools menu.
Click on Internet Options.
Click on the Content tab.
Click on the Certificates button.
Click on the Trusted Root Certification Authorities tab.
Look in the Issued to column for any MarketScore Inc certificates.
Delete any MarketScore Inc certificates.
Click Yes in each confirmation window that appears when you delete a certificate.
Look in the Issued to column for any Netsetter certificates.
Delete any Netsetter certificates.
Click Yes in each confirmation window that appears when you delete a certificate.
Remove the spyware and restore normal functionality by following this process. (http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10289035.html)
After removal of the software, change all passwords that might have been entered on the computer.
Manual Removal
Removing this software does not require a reformat of the computer. Three steps are required to remove this software from your computer.
Step 1 - Run the MarketScore Uninstaller
Go to the Start Menu and click Run.
Type command and press Enter.NOTE: Due to the different versions of MarketScore, you may have to try running a number of commands before the uninstall program will run. Try each of the commands in the order listed until you do not get an error message. This will then run the uninstall program.
On Windows XP or 2000, try the following commands:
mksc.exe -bootremove -uninst:RelevantKnowledge OR
ossproxy -bootremove -uninst:RelevantKnowledge OR
NSCheck.exe /uninstall
On Windows 95/98/ME, try the following commands:
%WINDIR%\SYSTEM\mksc.exe -bootremove -uninst:RelevantKnowledge OR
%WINDIR%\SYSTEM\ossproxy -bootremove -uninst:RelevantKnowledge OR
%WINDIR%\SYSTEM\NSCheck.exe /uninstall
Step 2 - Run Spybot: Search and Destroy
The MarketScore Uninstaller does not remove any registry entries that MarketScore installs. Spybot will find these entries and remove them from your computer. You can find information on how to install and run Spybot here.
Step 3 - Remove Security Certificates from your web browser
To remove the security certificates in Internet Explorer, use the following steps:
Click on the Tools menu.
Click on Internet Options.
Click on the Content tab.
Click on the Certificates button.
Click on the Trusted Root Certification Authorities tab.
Look in the Issued to column for any MarketScore Inc certificates.
Delete any MarketScore Inc certificates.
Click Yes in each confirmation window that appears when you delete a certificate.
Look in the Issued to column for any Netsetter certificates.
Delete any Netsetter certificates.
Click Yes in each confirmation window that appears when you delete a certificate.