0
skymama

Spyware....AGAIN!

Recommended Posts

I'm bumping this up to say thanks for all the helpful suggestions in here! I ran Spysweeper TWICE last night, and sure enough it found and removed things SpyBot and Norton did not. But it took over an hour each time, so I'll have to "road test" my 'puter tonight and see if there's a significant improvement! (If not, I'll have to take more extreme measures!- Maybe HiJack This??)

I truly do appreciate all the offers for help and great suggestions! You guys made me feel like part of the family yesterday! :)

Share this post


Link to post
Share on other sites
Question for the nerds:

I understand how spyware is passed via cookies and stuff put in the start menu,

But how is it passed via the registry? I thought the registry was just a big database.
...

The only sure way to survive a canopy collision is not to have one.

Share this post


Link to post
Share on other sites
Quote

The Spyware I can't get rid of is called VX2. Spybot and Ad-aware both say they have quarantined it, but after rebooting and a few minutes on the computer, it comes back and I get pop-ups.



I've had a virus like that for 4+ years now, the "kak" virus. Norton & McAfee catch it & delete it temporarily, then next time I boot up I've got it again. Ran the downloadable patch from microsoft, didn't seem to do anything. So that leaves me with having to delete a virus every time I turn on my computer. The irritation factor is sufficient that I basically never turn my computer off.

Blues,
Dave
"I AM A PROFESSIONAL EXTREME ATHLETE!"
(drink Mountain Dew)

Share this post


Link to post
Share on other sites
I havent gone though the whole gammit of spy, ad and virus tools, but mine keeps reloading every few times I reboot the machine. Looks like a probram infects a file that looks up on the net and loads the payload (which is just annoying, no dammage).

The Antivirus find the new payload but never find the infected file. BUT I use ZoneAlarm and it allerted me that a file that wasnt familiar to me was accessing the net (twix64.exe I think). I dissallowed it acces to the net, and no more problem for the moment. I could delete the file but I want to find a program that finds it...
Remster

Share this post


Link to post
Share on other sites
Spyware is often installed via trojan horses.

The most famous trojan is Kazaa. Any program downloaded "for free" is likely spyware encumbered.

Secondly, spyware is often installed remotely through well known windows bugs. A study came out a few days ago showing an unpatched Windows XP system will be completly taken over with "bots" in less than 4 minutes since being connected to the internet. Details here..


_Am
__

You put the fun in "funnel" - craichead.

Share this post


Link to post
Share on other sites
Just thought I'd add to this. I just had some pretty big upgrades to my PC done taht pretty much involved wiping it out and reinstalling everything. In the 5 minutes it took for me to re-download ZoneAlarm, Avast, and Adaware, my PC was overtaken by bots and trojans. COMPLETELY taken over. Unknown software being installed, yadda yadda.

I found a program called CounterSPy by Sunbelt Software that has a free 15 day trial (fully functional) and it CLEANED HOUSE. Didn't just get rid of an odd file, but the entire spyware program. Also found a free trial for 30 days of a program called TrojanHunter that roots out Trojans and it worked fairly well too. Both of these programs worked when Adaware locked up.

Just sharing info.:)

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

0