Note to PeoplePC re Bartshel, and reply from PeoplePC

Original Message----
> From:
> To:
]
> Date: 19 November 2005, 17:37 Hrs.

> Subject: What is Bartshel ("provided" by PeoplePC)? And Why?
> Why does it crash my computer when I try to end it in Taskbar?
>
> Did I consent to the installation of this executable file?
> Is it MALWARE?
>
> Do you have a SONY situation on your hands, for which you should
> take responsibility?
>
> martin david tilson, 3rd, MD
> Presently, a People PC subscriber
>
> Should I post this alert to a BLOG to alert other users?
>
Dear Martin, re: [Ref:1433412


Thank you for writing to PeoplePC Online.

Regarding your concern, we recommend that you reinstall the PeoplePC
Online software. You can reinstall our software while connected with
our dialer. Just connect to the internet and click on the link given
below:

http://getsoftware.peoplepc.com

This is an effective and easy way to upgrade to our newest version.

Please be advised that our installation process (when not connected)
first uninstalls any previous version of software that you may have
downloaded.

Thanks again for writing.

All the best
Prerna
One of the people at PeoplePC Online

dave

I followed the instructions from PeoplePC: downloaded and installed
fresh software.
Barsthel continues to respawn, after several reboots.

I have neglected to update my Ad-Aware software for several weeks. So
I updated
the list and ran the program. It found and removed about 60 new
malware programs.

However, Bartshel continues to run amuck.

Suggestions from newsgroup would be appreciated.

dave

dave wrote:
> Original Message----
> > From:
> > To:
> ]
> > Date: 19 November 2005, 17:37 Hrs.
>
> > Subject: What is Bartshel ("provided" by PeoplePC)? And Why?
> > Why does it crash my computer when I try to end it in Taskbar?
> >
> > Did I consent to the installation of this executable file?
> > Is it MALWARE?
> >
> > Do you have a SONY situation on your hands, for which you should
> > take responsibility?
> >
> > martin david tilson, 3rd, MD
> > Presently, a People PC subscriber
> >
> > Should I post this alert to a BLOG to alert other users?
> >
> Dear Martin, re: [Ref:1433412
>
>
> Thank you for writing to PeoplePC Online.
>
> Regarding your concern, we recommend that you reinstall the PeoplePC
> Online software. You can reinstall our software while connected with
> our dialer. Just connect to the internet and click on the link given
> below:
>
> http://getsoftware.peoplepc.com
>
> This is an effective and easy way to upgrade to our newest version.
>
> Please be advised that our installation process (when not connected)
> first uninstalls any previous version of software that you may have
> downloaded.
>
> Thanks again for writing.
>
> All the best
> Prerna
> One of the people at PeoplePC Online
>

dave

From: "dave" <>

| I followed the instructions from PeoplePC: downloaded and installed
| fresh software.
| Barsthel continues to respawn, after several reboots.
|
| I have neglected to update my Ad-Aware software for several weeks. So
| I updated
| the list and ran the program. It found and removed about 60 new
| malware programs.
|
| However, Bartshel continues to run amuck.
|
| Suggestions from newsgroup would be appreciated.
|
| dave

Ren Bartshel.exe to Bartshel.BAK

Reboot the PC and see if it affects the PeoplePC Dial-Up.

Please submit a sample of "Bartshel.bak" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

When you get the report, please post back the exact results.

We'll then see if is identified as malware of the adware/spyware kind.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman

Dear dave (from dave)

Thanks for your suggestions. I used start->find, and I located several
'bartshel's.
I renamed one to .bak, but I could not rename others as they were "in
use by Windows".

I cold rebooted computer (IBM T23 running Win98SE with lastest critical
updates),
and bartshel respawned again in Task Manager, before launching
PeoplePC. I
guess I am stuck at this point, and would welcome additional
suggestions.

thanks,

dave

dave wrote:
> Original Message----
> > From:
> > To:
> ]
> > Date: 19 November 2005, 17:37 Hrs.
>
> > Subject: What is Bartshel ("provided" by PeoplePC)? And Why?
> > Why does it crash my computer when I try to end it in Taskbar?
> >
> > Did I consent to the installation of this executable file?
> > Is it MALWARE?
> >
> > Do you have a SONY situation on your hands, for which you should
> > take responsibility?
> >
> > martin david tilson, 3rd, MD
> > Presently, a People PC subscriber
> >
> > Should I post this alert to a BLOG to alert other users?
> >
> Dear Martin, re: [Ref:1433412
>
>
> Thank you for writing to PeoplePC Online.
>
> Regarding your concern, we recommend that you reinstall the PeoplePC
> Online software. You can reinstall our software while connected with
> our dialer. Just connect to the internet and click on the link given
> below:
>
> http://getsoftware.peoplepc.com
>
> This is an effective and easy way to upgrade to our newest version.
>
> Please be advised that our installation process (when not connected)
> first uninstalls any previous version of software that you may have
> downloaded.
>
> Thanks again for writing.
>
> All the best
> Prerna
> One of the people at PeoplePC Online
>

dave

From: "dave" <>

|
| Dear dave (from dave)
|
| Thanks for your suggestions. I used start->find, and I located several
| 'bartshel's.
| I renamed one to .bak, but I could not rename others as they were "in
| use by Windows".
|
| I cold rebooted computer (IBM T23 running Win98SE with lastest critical
| updates),
| and bartshel respawned again in Task Manager, before launching
| PeoplePC. I
| guess I am stuck at this point, and would welcome additional
| suggestions.
|
| thanks,
|
| dave
|


Boot ito Safe Mode and rename; Bartshel.exe to Bartshel.BAK

BTW: Where is that Virus Total report I requested ?

Please submit a sample of "Bartshel.exe" to Virus Total --
http://www.virustotal.com/flash/index_en.html
The submission will then be tested against many different AV vendor's scanners.
That will give you an idea what it is and who recognizes it. In addition, unless told
otherwise, Virus Total will provide the sample to all participating vendors.

When you get the report, please post back the exact results.

We'll then see if is identified as malware of the adware/spyware kind.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman

Dear David Lipman,

I'm sorry, but I haven't had time to follow your
instructions for preparing the report you requested.
I appreciate your clue about renaming bart in Safe
Mode, and I will do so tomorrow; and I will continue
to keep you posted. I have my "day job" to do, before
I can get to tending to my computer security. Perhaps,
I should switch my priorities. But, time flies. I will
try to repond tomorrow with more hard info.

dave (obviously, from email address, at Columbia University.)

dave

From: "dave" <>

| Dear David Lipman,
|
| I'm sorry, but I haven't had time to follow your
| instructions for preparing the report you requested.
| I appreciate your clue about renaming bart in Safe
| Mode, and I will do so tomorrow; and I will continue
| to keep you posted. I have my "day job" to do, before
| I can get to tending to my computer security. Perhaps,
| I should switch my priorities. But, time flies. I will
| try to repond tomorrow with more hard info.
|
| dave (obviously, from email address, at Columbia University.)

I'm sorry. I no longer have the time to provide you any help.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman