Hi team,

I have just removed from my computer a program file called 'Overland', that I found in C/Program files.

Thinking back it has been there for 5 months or so, and for five months I have been seeing an icon in the task bar appear for one second then dissappear. Immediately after the icon disappears, ZA Pro icon flashes green, as if info was being sent out.

No matter how I tried, I couldn't open the icon that appeared in the task bar by clicking on it. The icon was a white rectangle with a blue line on the top.

I had a HiJackThis log done a few months ago, and the forum here said it was clear. I run TD3, Norton AV 2005, AdAware, Spybot S+D 1.4, MSAS, A2 Free, Trojan Hunter, and do online scans for AV with Trend Housecall.

Nothing indicated that there was a problem on my computer.

However, it appears that since this evening the strange icon is no longer appearing.

The concerning thing is that when I do a Google for Overland, I find they do backup software and hardware backup and off site backup stuff, here is their link:

http://www.overlandstorage.com/about_overland_landing.html

I am really concerned that the overland program has been sending out my data for months...what do you think?

I believe that the Overland came through a HP Software AutoUpdate, as I clearly remember the occurence. I have worked with HP online virtual techs tonight, and they say it [overland] is nothing to do with them. They helped me remove it by directing me to go into safe mode and Search for overland, and delete all there.

What action should I take?

Has anyone else heard of this program....and clues or practical advice on the possible breech in my secuirty would be most welcome

Thanks for reading this post - I really value your time!

Rgds

Forward Up

Overland.JPG
Description:	This is a JPEG of the contents of the Overland program file, where you can see what it contains
Filesize:	103.01 KB
Viewed:	1574 Time(s)

Hi forwardup,

If it has been removed, then no problem. You might get Crap Cleaner (freeware) so you can delete any remnants from the registry?

Was it not in your Add/Remove Programs?

If you dislike this program then remove it.

If you need a backup program that does not phone home you can try the Karenware Replicator (freeware). I use it and it works fine.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008

Thanks for your quick reply!

I could not see Overland in +/- Programs.

When I looked at the 'Programs' tab in Zone Alarm Pro it was not listed there either.

Do you recommend I change all my passwords - I would like advice as to just how much/type of information it 'could' have sent out. The program size of Overland was 7.78MB [quite large don't you think?]. Sorry, I know this question is a bit like how long is a 'piece of string'.

I certainly didn't install Overland with it in mind as a backup software program, only that it was a 'recommended HP Update'. But they[HP] say it was not from them at all. But I am absolutely sure about the window that opened for the HP Update, and I have checked back through my comprehensive paper trail log, [yes, I keep an A4 pad next to me at all times to jot time and events down ].

I have emailed the company Overland, and have requested more information on them with regard to the specific software and what it might have been doing. I will post here with any response.

When I looked in Task Manager I could never see Overland in 'Applications', and when I ran the program 'StartUpList', I couldn't see Overland in that log either.

I am obviously feeling a tad paranoid, and wish to 'tease out' and debrief on this issue.

Thanks again for your time and energy in replying!

Forward Up

Is your PC second-hand or is anyone else using it besides you? That could explain where this program came from? Overland is not malware so it didn't install itself. Did you install any freeware program bundles?

It seems to be gone now. The size of the Overland application is not an issue here. 7.78 Mb is smaller than many Microsoft updates.

Crap Cleaner shows you what it finds before you decide to delete it. You can fiddle around and analyze as often as you like before deleting stuff. You can specify scanning particular folders in the Options menus. It can also cleanup your Registry easily and safely. It will ask you to make a backup of the registry before you make any changes. Do so.

Crap Cleaner will not automatically remove any system files/folders. I've tested it.

By clicking the Tools button you will get an alternative to the Add/Remove Program list that is far easier to navigate and use. You can delete entries that have been uninstalled but are still listed there or run the uninstallers for any you wish to remove. It will also show your startup list (2nd Tab) so you can see what is loading when you start your computer.

Screenshot

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008

Hello forwardup,

In addition to Prince_Serendip's advice, I would suggest that you start monitoring what programs run automatically when you boot your computer (the Startup tab under the msconfig command doesn't always tell you everything).

WinPatrol has a free verson (available at www.winpatrol.com) that is easy to use and provides many other features in addition to a startup manager. Also try StartupList (available at http://www.lurkhere.com/~nicefiles), which is a utility that will tell you everything, but performs no actions.

Thanks Fox,

That helps too. The more the merrier.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008

Hi Prince_Serendip

Hi - new to the forum.

Arrived here via Google search for Overland malware/spyware.

I, too, discovered Overland residing in my C: /Programs.
Had no idea of its intent, could not remember downloading.

I often(once a minute?) see, for a split second, a program on my task bar.

I have a HP notebook, and used the HP Update. I think that is where Overland came from, too. When I use my Windows Explorer, and hold the curser over some of the files in Overland the popup bubble says the Author is HP.

I intend to delete Overland immediately, but like forwardup, it's not listed in +/- Programs, nor in a commercial uninstaller I use(Advanced Uninstaller).

Should I just use Windows Explorer and delete the entire folder, then run a regcleanup program? What is the safe mode deletion?

Thanks

This needs investigating. I previously assumed that Overland was on the up and up and now I see that could have been too hasty a judgement.

I too have an HP that had Backweblite factory installed. I removed it manually because when Spybot tried to do it, it always crashed. I then used Crap Cleaner to remove the remnants from the registry.

Crap Cleaner is the 5th one down on this download list: /downloads-cat-29.html
It's freeware. See above post for screenshot.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008

Thanks - will dl Crap Cleaner tonight and get to work.

Great forums btw - a real eye-opener.

I assumed I had my malware/spyware/trojan bases covered by using SpyBot S&D, Ad Aware, and SpywareBlaster.

Not so sure anymore - thinking of going commercial grade with TDS-3.

Maybe overkill, but sorta freaked atm.

Hi

Here is the update....


I spoke with HP support and they have no records of any Overland software used on any HP machine. However, looking back through my notes Overland arrived through the BackWebLite HP Update software preinstalled on this HP Pavilion I use.

I was directed by HP to go to Safe Mode, and delete Overland completely, which was avery simple and straightforward job.....[when computer is up and running, click >Restart> and then as soon as the Desktop clears away repeatedly press the F8 key until the computer begins to boot into the black and white screen, then choose the options using the 'up and 'down' keys to go completly into Safe Mode].

Once in Safe Mode go to the location of 'Overland' and delete the whole file in one go. That's all - done. Reboot the computer.

I was asked to check the Registery for Overland entries left behind, but there wasn't anything.

I then ran CCleaner and thats it.

I have no problems with the 'weird program icon' appearing for a split second in the task bar.

barbula76 hope you get your Overland issue fixed, I'll watch this thread to see if anyone posts back.

Cheers

Forward Up

Sounds like a good fix, and it works. It may be that Backweblite downloaded it for you, after you went online? Either that or it came bundled with some other application?

Nice work in any case. Btw, Crap Cleaner is just a utility. It does not clean malwares, just junk files.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008

I had the exact same problem as described in the initial post. I deleted the Overland folder from Program Files, but the task bar icon still runs every few minutes. It shuts off my screen saver, but doesn't seem to communicate with the outside world according to ZoneAlarm. Any ideas why the icon still pops up? I'm running Win2KSP4 and have had this problem since doing an HP update. Thanks.

Hi and welcome to CastleCops

Have you done any further HP updates? If the icon is still there, then so is Overland. Have you tried searching for it on your HD? It may be in another location?

How to Show Hidden Files & Folders for all versions of Windows.

_________________

Microsoft MVP Consumer Security 2006, 2007 & 2008