Help - Search - Members - Calendar
Full Version: SPYWARE!
soompi forums > soompi interests > tech > troubleshooting & help
Pages: 1, 2, 3, 4
awdark
IPB Image
Now you have spyware... good job.

Lets try to salvage whats loss and fix it.

System Restore
One of the many features that Microsoft included with Windows XP that is actually useful!
So, when you know you did something stupid or your computer did the stupid thing on its own, run system restore and restore to the most recent point.
Start->Programs->Accessories->System Tools-> System Restore
Click restore my computer to an earlier point, hit next, choose the date, let the computer restart itself and eventually work again.
Note: System restore fixes .exe .dll and some other files that were changed between that point and now. Your pictures, documents, media are not restored or touched... so if its a fun spyware that screwed it up, it wont fix it.

ADaware
Somewhere on this site you will find a download link http://www.lavasoftusa.com/software/adaware/ even if you don't think you have spyware its always good to scan occasionaly. I like it... its free can't beat that.

Spybot Search and Destroy
http://beam.to/spybotsd as recomended by floppy. It has a nice scanning and spyware removal features that sometimes work better than Adaware... so try both if you have stubborn spyware.

Hijackthis
Some people don't really like it, I find it very useful. http://www.spywareinfo.com/~merijn/downloads.html Run it, scan, look at the list. What you don't understand go >_<.
Okay, im not that cruel lol. Seriously its nice to scan when you don't have a problem, that way you know what won't belong on the list. A lot of times you can just scan, check off the things that don't belong and have it "fix" it. After you restart if it comes back, google it. If you got the spyware there is at least a few other people out there who got the same thing...

AIM Fix and IE Fix
Two utilities I read about here is AIM Fix, a fixer for those stupid AIM viruses and IE fix a set everything back to default fix for Internet Exploder. I have never tried these programs but if they do what they are supposed to O_O hell ya! http://jayloden.com/software.htm

The BEST thing to do is AVOID the spyware.
Firefox
http://www.mozilla.org/products/firefox/
I seriously dont know WHY so many people don't like it. If you don't, thats okay... Perhaps you like
Opera
http://www.opera.com/
Some people just like Opera, I don't really like it but its now add free and as close to freeware as you get.

And if you like IE, some antiviruses will stop some... Firewalls can't really help because spyware comes in as regular web data... like opening soompi.

Spyware Blaster
http://www.spywareblaster.org/downloads.html as recomended by femaki84 is good at blocking out spyware and preventing them from installing.

Spyware guard
http://www.javacoolsoftware.com/spywareguard.html looks like a very good simple anti-spyware utility, but I have not tried it and I don't intend to try it by going to a spyware infested site to test it. Looks very similar to Spyware Blaster, its actually from the same company but they are both free, why not try them.

Google Toolbar
http://toolbar.google.com/firefox/index.html HyunJoonzGirl~* recomends the use of Google Toolbar for blocking popups. I have this installed but don't use it much anymore because I prefer Firefox. Either way, it adds a nice and useful google box to your IE and blocks out popups. If you have those Anti-Spyware utilities running, it might be bring up a red flag as a BHO (browser helper object) except its okay because this type of software was the original intent of Browser Helper Objects... not Browser Objects that direct you to an advertisement site.

IE-Spyads
https://netfiles.uiuc.edu/ehowes/www/resource.htm also recomended by floppy. Will help try to stop spyware from installing for those dedicated IE users.

Also, take a look at http://www.hardforum.com/showthread.php?t=768776 it is called the "Rampant Paranoia" thread. You can follow that and even make your prescious IE spyware resistant.

The last thing I want to add that most people don't often think about is Windows Updates. Windows is FULL of bugs and known exploits. Did you know a computer connected to the internet with Windows XP or Windows 2000 freshly installed will be full of viruses within a few hours? You dont even need to touch your mouse or keyboard, the viruses will do it for you.


I think thats it, anyone that can do better do it wink.gif happy.gif

Winfixer
There are so many people that seem to be getting this that I think its worth my time editing this.
http://www.spyware-removal-guideline.com/winfixer-removal
similar but looks more logical look at post #2.
http://discussions.virtualdr.com/showthread.php?t=194625
Both essentially does the same thing. They both use Vundo and involve removing the entries from the startup, then the program finishes off the spyware in safemode.
Luly recomends this guide
http://www.geekstogo.com/forum/How-to-remo...rib-t91765.html
Winfixer http://www.soompi.com/forums/index.php?showtopic=81771
ChickenNWaffles
for hijackthis you should post your results on a forum and get help on what shouldnt be there if you dont know what should and shouldnt be there.
HyunJoonzGirl~*

And to keep your computer clean, download the Google Toolbar that will help you hold the pop-ups on some websites that contain adware viruses. It's smaller than anti-viruses and very useful.


me,
HyunJoonzGirl~*
femaki84
Aww..Awdark...You're still here to help everyone! Cheers~~

Oh..and I highly highly recommend Spyware Blaster from www.spywareblaster.org...It prevents Spywares even from installing first...Rather than remove it AFTER installation of those pesky spywares...Im using it myself..And it works great..No spywares so far...Oh..and u get to use it for free..plus free updates...
litoxshortaii
i found the google toolbar as unuseful as any other downloaded pop up blocker.. the best ones are the ones that are automatic in the browser, such as firefox. except my firefox has issues and one day decided to stop blocking pop ups haha. i have aol explorer right now and i works pretty well in blocking pop ups.
vondunker
thanks awdark for sharing those links/tips, you're so nice.

btw, other than the adwares spy wares problem, my lappy just wont let me shut it down. No matter how many times i press the shutdown/restart button, it just doesnt work. sometimes the th task bar and the start button at the left even hang. what problem could it be, anyone knows?
floppy
There's Spybot S&D too, the immunisation feature works great.

Another prevention measure that i'd recommend is the installation of IE-Spyads if you're using Internet Explorer as your default browser. Basically, the file contains a repository of sites with malicious spywares and blocks then without you knowing it. Perfect IMHO, I havent gotten a single spyware infection for the more than a year with this 2 tools. smile.gif
awdark
QUOTE(vondunker @ Oct 9 2005, 06:02 PM) [snapback]159709[/snapback]

thanks awdark for sharing those links/tips, you're so nice.

btw, other than the adwares spy wares problem, my lappy just wont let me shut it down. No matter how many times i press the shutdown/restart button, it just doesnt work. sometimes the th task bar and the start button at the left even hang. what problem could it be, anyone knows?


Sounds like you have lots running in the background... possibly spyware that takes up lots of resources... Scan for that and possibly viruses.. Make sure you dont have very many things starting up as taht will make shutdowns take longer too.

Lastly, try this registry hack that will decrease the shutdown timeout for services
Start Regedit.
Navigate to HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control.
Click on the "Control" Folder.
Select "WaitToKillServiceTimeout"
Right click on it and select Modify.
Set it a value lower than 2000 (Mine is set to 200).
nevets1219
Food for thought: Virus may get backed up in System Restore - so using it can bring back virus and scanning *might* detect it but won't let you remove it since it is protected by Windows. System Restore is really meant for software that broke Windows unintentionally.

[WINDOWS KEY + R] "msconfig" -> Check your boot up processes (Google helps here)

[WINDOWS KEY + R] "taskmgr" -> Check current processes for mystery item (Google again?)

Also stay up to date on patches/fixes for your Windows OS and Internet Explorer (whether you use IE or not).
Luly
anyone knows how to remove WinFix?

i've tried ad-aware, spybot, spyware doctor & hijackthis... none seems to work. cos when i scan after rebooting the comp it's still there. ahhh.... O_o
awdark
I replied to a winfixer thread yesterday or day before yesterday, If the problem remains (since you posted 3 days ago have you tried that manual remove method?)
ichiban
heres some helpful programs...i've cleaned out spyware on my computer using
bazooka spyware scanner (freeware)
etrust pestpatrol
xoftspy
hope that helped!
Luly
QUOTE(awdark @ Oct 31 2005, 03:21 PM) [snapback]505782[/snapback]

I replied to a winfixer thread yesterday or day before yesterday, If the problem remains (since you posted 3 days ago have you tried that manual remove method?)


i solved the problem already. biggrin.gif thanks anyway, & ichiban too ^^
vietmatch
thanks for the spy ware!!! biggrin.gif
GiOx
-edit-

nvm. i already fix it.
internetwarfare
I have hella trojans and when i go to openmy spyware killers nothing shows up. Only rarely do they come up and even then all the trojans arent deleted. Any suggestions besides system restore or reformating?
awdark
I expected more from a guy with a powerful screen name like that.

I am pretty sure you would have your best luck with a good antivirus to fight trojans.
I would recomend that you download antivirus, hijackthis, and well im not sure what can identify your trojan problem if they cant find it... However, I would disconnect it from the intenet to prevent any more from loading in and try to clean it in safemode.

From the sounds of it, I would have to assume that your trojan probem is not system-restore able.

This might be a dumb question... but where are the trojans usually found and how do you know you have trojans if the antispyware apps cant find it?
I ask this because websites are often loaded with exploits and trojans that give me warnings, but I know they are only temporary and will not actually install a trojan if I dont use IE.
[HyuNi]
My homepage got hijacked and I went to download.com to look for some spyware remover software, but they most only provide free scan and no spyware removal services until you buy their product. Is there any good software programs that anyone knows of that can restore my homepage?

Gah... spyware is so annoying.

Oh yeah, and I already have the current version of norton antivirus and adaware-SE and they both have yet to fix the problem. I also tried system restore, but it said that the restoration could not be complete.

I'm running out of options!

thanks so much!

-John
awdark
Your best bet is to use hijackthis and google every program or startup entry that doesnt sound familiar to you. Then once you identified your enemy, you can look up on how to fight it.
LuvTvSeries
i have been having troble with a virus in my computer.. i dont noe what to do.. im so confused! sad.gif My virus scanning thingy detects, but i dont noe why cant delete and restore my files... what do i do to delete it and restore my database?... also the same virus keeps popping up.. :

Haaxalarm - K
Trojano - 3072
Dialer - 407
Trojano - 3227
Trojano - 2201
and Cws - J

Can some please help me!!!
shinhwahwah
ARGH i just got this dam virus thing yesterday. something called trojan.startpage. i cant seem to delete it and i scanned it so many times wit the shield thing and adaware.
and i cant seem to delete secure32.html from my files. everytime i do it it reappears. and surferkickz3 in my program files. it wont go away and i think its the virus. HELP PLZ!
Tr710
I got some spywares while trying to dl a codec to watch a vid. I've been trying to get rid of them by using Spybot and Adware but to no avail, they keep on coming back. I try to manually detele them from the source, in the SYSTEM32 folder but couldn't either. The message keep on saying the application cannot be deleted because it is in use. So I try to end task them via Windows Task Manager but, again they came back right away.

I figure there must be something that prompt them to activate, turns out it's Explorer (I think). So when I end task Explorer and then end task the spywares, they don't come back. Problem is, in order for me to manually delete them, I need to get to SYSTEM32 folder which requires Explorer to run, which will activate the spyware, which won't let me manually delete them. ARGGGG!! It's a deadly cycle and I'm trapped.

The spywares' names are: mssearchnet, ncompat, nvctrl. Any one familiar with these buggers?

Can any one help me with this little conundrum?

Additional info: every time I open IE, this is the page that comes up: http://www.yoursecuritysystem.com/ Warning: suspicious link. The thing is that the home page setting is "blank," yet that page comes up first.

awdark
Oh gheez I ignore this thread for a whle and it blows up O_O

QUOTE(LuvTvSeries @ Dec 28 2005, 09:18 AM) [snapback]1151398[/snapback]

i have been having troble with a virus in my computer.. i dont noe what to do.. im so confused! sad.gif My virus scanning thingy detects, but i dont noe why cant delete and restore my files... what do i do to delete it and restore my database?... also the same virus keeps popping up.. :

Haaxalarm - K
Trojano - 3072
Dialer - 407
Trojano - 3227
Trojano - 2201
and Cws - J

Can some please help me!!!

Have you tried to start your computer in safe mode to gain access to those files to delete them?

QUOTE(shinhwahwah @ Jan 9 2006, 12:16 PM) [snapback]1296731[/snapback]

ARGH i just got this dam virus thing yesterday. something called trojan.startpage. i cant seem to delete it and i scanned it so many times wit the shield thing and adaware.
and i cant seem to delete secure32.html from my files. everytime i do it it reappears. and surferkickz3 in my program files. it wont go away and i think its the virus. HELP PLZ!

The spyware you ahve is Spysheriff http://www.spyware-removal-guideline.com/spysheriff-removal
http://www.2-spyware.com/remove-spysheriff.html might also be a useful link it has a "Automatic SpySheriff removal" but I dont know how trustworthy that would be. I found those links here http://www.bullguard.com/forum/12/HiJackTh...tml-_24533.html


QUOTE(Tr710 @ Jan 14 2006, 04:48 PM) [snapback]1352642[/snapback]

I got some spywares while trying to dl a codec to watch a vid. I've been trying to get rid of them by using Spybot and Adware but to no avail, they keep on coming back. I try to manually detele them from the source, in the SYSTEM32 folder but couldn't either. The message keep on saying the application cannot be deleted because it is in use. So I try to end task them via Windows Task Manager but, again they came back right away.

I figure there must be something that prompt them to activate, turns out it's Explorer (I think). So when I end task Explorer and then end task the spywares, they don't come back. Problem is, in order for me to manually delete them, I need to get to SYSTEM32 folder which requires Explorer to run, which will activate the spyware, which won't let me manually delete them. ARGGGG!! It's a deadly cycle and I'm trapped.

The spywares' names are: mssearchnet, ncompat, nvctrl. Any one familiar with these buggers?

Can any one help me with this little conundrum?

Additional info: every time I open IE, this is the page that comes up: httpwww.yoursecuritysystem.com Warning: suspicious link. The thing is that the home page setting is "blank," yet that page comes up first.

Have you tried a system restore? Those thinks keep saving me so I trust in system restore.
I suggest you click edit to the lnk and make it like yoursecuritysystem.com instead of including the http part.
Visit http://www.techimo.com/forum/t159670.html that looks like it might apply to you.
Tr710
^Nope, I didn't. But I got it fixed already, thanks though. smile.gif
megaSTEPxo
nvm, fixed-
Lelaye
Bloodhound.W32.EP

sad.gif? I'm horrible at this stuff. I tried to fix it, clean it, delete it, but it still won't go away. Annoying.
yokemun
thanks a lot for all the links and helps!!!!!

is really useful!!!!

thank you so much!!
Akira
okay, so right now whenever i type in "hijackthis" or try to run it, it automatically shuts down the program or web browser.
it won't let me acess any anti virus sites, and says they cannot be found when i try.
how do i fix this?
nothing seems to work atm, i think other programs find it, but it wont let me get rid of it since it's just a trial version/scan >__>
does anyone have any suggestions on how to get rid of this, or know what it is even?
Luly
QUOTE(Akira @ Feb 17 2006, 02:59 PM) [snapback]1709838[/snapback]

okay, so right now whenever i type in "hijackthis" or try to run it, it automatically shuts down the program or web browser.
it won't let me acess any anti virus sites, and says they cannot be found when i try.
how do i fix this?
nothing seems to work atm, i think other programs find it, but it wont let me get rid of it since it's just a trial version/scan >__>
does anyone have any suggestions on how to get rid of this, or know what it is even?


try this... hope u r able to d/l it.

Ewido Security Suite


though the free version lasts for 14 days only, it works wonderfully well at removing the malwares. it helps me to remove a desktop hijack (my whole desktop + taskbar are gone 3min after windows is loaded. O_o) when all other progs like spybot & adaware cant work at all. biggrin.gif

after installing, do an update 1st then scan. u need to monitor it to see a notification window of malware popping up. then choose clean/remove and check the box "Perform action with all infections"
ddonq
QUOTE(awdark @ Oct 4 2005, 09:57 PM) [snapback]6370[/snapback]


System Restore
One of the many features that Microsoft included with Windows XP that is actually useful!
So, when you know you did something stupid or your computer did the stupid thing on its own, run system restore and restore to the most recent point.
Start->Programs->Accessories->System Tools-> System Restore
Click restore my computer to an earlier point, hit next, choose the date, let the computer restart itself and eventually work again.
Note: System restore fixes .exe .dll and some other files that were changed between that point and now. Your pictures, documents, media are not restored or touched... so if its a fun spyware that screwed it up, it wont fix it.



what does that do? by doing that does it remove some viruses./trojans?

oh yeah, whenever i start my computer up, this pop up thing pops u, and it says:
RUN or CANCEL? l074.exe <--- thats the name thingie.

is there a way to prevent that from popping up whenever i start my comp?
jinhee
i was d/l music and then suddenly, this thing popped up on my desktop that said i was infected with spyware. I restarted my computer, but i could only get to the logon screen until a warning popup said something along the lines of "Couldn't access wininet.dll. reinstall the application.". i know there's someway to fix this by downloading wininet.dll, but my computer won't access the internet through the task manager (which is the only thing that's working on my comp). i wanna try the system restore thingy, but how do i do that from task manager??

btw, I have windows xp.
o_eun_2
i have a malware spyware, or something like that, that keeps downloading "spyfalcon". i use adaware se but it doesnt seem to work. there is this bubble thing that pops up from the bottom right hand corner that says that a spyware was detected and it will download a spyware remover software... and thats spyfalcon which is (i think) a fraud. and also my internet home page is some weird security page thing... and it won't let me change it.... i tried going to noahdfear.geekstogo.com but it doesnt work for my system.. HELP PLEASE!!
yunax21
^ i hav the same problem as you... btw. dont dL spyfalcon. its actually a spyware not a real spyware remover... i use ad-aware too but it only removes spyfalcon for a moment... it comes bak later sleep.gif its quite annoying.. i dont know how to get rid of it too :[ HELP SOMEONE!! >.<
QUOTE(Lelaye @ Feb 8 2006, 08:42 PM)

Bloodhound.W32.EP

? I'm horrible at this stuff. I tried to fix it, clean it, delete it, but it still won't go away. Annoying.


use norton to get rid of that.. thats how i got rid of mine.
o_eun_2
QUOTE(yunax21 @ Mar 12 2006, 01:20 AM) [snapback]1952416[/snapback]

^ i hav the same problem as you... btw. dont dL spyfalcon. its actually a spyware not a real spyware remover... i use ad-aware too but it only removes spyfalcon for a moment... it comes bak later sleep.gif its quite annoying.. i dont know how to get rid of it too :[ HELP SOMEONE!! >.<
use norton to get rid of that.. thats how i got rid of mine.




Thanks for the help!!~ thank you for the help!
Mademoisella
OMFGG!! HOW DO I GET RID OF SPYFALCON!!! it's freaking annoying me like HECK FOR MORE THAN 2 months now...

HELPP TT TT
i'm lagging yo
remove spyfalcon: http://forums.majorgeeks.com/showthread.php?t=85077

to everyone else who seems to have virus/spyware/trojan problems: http://forums.majorgeeks.com/showpost.php?...939&postcount=2

give yourself some time to read it over carefully.

QUOTE(ddonq @ Feb 28 2006, 03:50 PM) [snapback]1828547[/snapback]

oh yeah, whenever i start my computer up, this pop up thing pops u, and it says:
RUN or CANCEL? l074.exe <--- thats the name thingie.

is there a way to prevent that from popping up whenever i start my comp?


that's a trojan... don't let it run. run a virus scan and clean it
Mademoisella
^aww thank you!!!!! but gah so many steps, but i got it! THANK U!
B0hemian_Sprite
OMG <3 thanks guys for the ad-aware link. I just ran it a couple of times today, and it got rid of about 150 spywares. My computer's running faster...

Where do these spywares come from? I mean, I don't understand?
awdark
If you use ie, often those activeX scripts...
They also bundle it in advertisements...
And soemtimes include it with software... you know like kazaa...
Tetra
QUOTE(awdark @ Apr 25 2006, 11:55 AM) [snapback]2366968[/snapback]

If you use ie, often those activeX scripts...
They also bundle it in advertisements...
And soemtimes include it with software... you know like kazaa...


Almost every "free" program comes with adware or spyware >.<
I blame marketing for half the adwarezzz excl.gif excl.gif
francesivy
i don't know if this is a stupid question, but if you were able to delete the file that got infected with a virus, is the virus completely removed from your computer? or are there still "traces" of it?
SaturnCharm
can someone help me? i tried all the anti-spyware and anti-virus that you all posted but they don't work for me. when i download them i can't delete the spyware and virus cuz they want me to register and order the program.. Does anyone know a program that lets me delete the spyware and virus without me having to register and order?
Tetra
Aren't there trials of those programs?
Like ad-aware really pissed me off cause I couldn't delete >=[
B0hemian_Sprite
AGHS!!!!!!!! I'm getting more pop-ups!
awdark
First of all mellow.gif o_o" I didn't think this stickie would go to chaos...

QUOTE(francesivy @ Apr 29 2006, 05:03 AM) [snapback]2401329[/snapback]

i don't know if this is a stupid question, but if you were able to delete the file that got infected with a virus, is the virus completely removed from your computer? or are there still "traces" of it?

Its very likely that you got rid of all of it on one shot... but there is always a possibility of some junk remaining. Its like installing AOL. Once you put in the CD, it will automatically put shortcuts to AOL in your start menu, favorites in IE, and whatver else. So depending on the virus you might have something left. But sincce you haven't had any problems (I assume) recently, its pretty much safe to say you removed enough of it so it no longer works.

QUOTE(SaturnCharm @ May 10 2006, 06:20 PM) [snapback]2497228[/snapback]

can someone help me? i tried all the anti-spyware and anti-virus that you all posted but they don't work for me. when i download them i can't delete the spyware and virus cuz they want me to register and order the program.. Does anyone know a program that lets me delete the spyware and virus without me having to register and order?

http://www.download.com/Ad-Aware-SE-Person...ubj=dl&tag=top5
Adaware is still free...
http://www.safer-networking.org/en/index.html
Spybot is still also free...

QUOTE(Tetra @ May 10 2006, 06:44 PM) [snapback]2497482[/snapback]

Aren't there trials of those programs?
Like ad-aware really pissed me off cause I couldn't delete >=[

Are you sure? Cos adaware and those are still free... unsure.gif they offer "premium" stuff but thats useless addons.
Perhaps its just a stubborn spyware that doesn't let you kill it. Try safemode then do the scan again.

QUOTE(Pattie Says @ May 17 2006, 09:59 PM) [snapback]2556749[/snapback]

AGHS!!!!!!!! I'm getting more pop-ups!

Scan, see whats the cause of your problems. wink.gif
4321
QUOTE(awdark @ Oct 4 2005, 09:57 PM) [snapback]6370[/snapback]

System Restore
One of the many features that Microsoft included with Windows XP that is actually useful!
So, when you know you did something stupid or your computer did the stupid thing on its own, run system restore and restore to the most recent point.
Start->Programs->Accessories->System Tools-> System Restore
Click restore my computer to an earlier point, hit next, choose the date, let the computer restart itself and eventually work again.
Note: System restore fixes .exe .dll and some other files that were changed between that point and now. Your pictures, documents, media are not restored or touched... so if its a fun spyware that screwed it up, it wont fix it.

This worked like a charm! I had this thing called Spyware Quake (a trojan) that got installed in my computer yesterday but now it's gone. w00t.gif Thank you so much.
Poop-Shoop-A-Loop
tears.gif I wish I checked this section before I completely wiped out my disk drive and lost all my beautiful data tears.gif tears.gif I feel dumb. :x
angelZ
i don't know what happened because i don't use IE but i got a virus somehow and it basically refused to let me go to any sites when i tried to open IE (cuz i wanted to see what was wrong). it kept telling me my system was vulnerable and that my personal info could be used. anyway i tried to change my homepage back to what it was originally (yahoo.com), but it wouldn't let me. i kept getting this "about:blank" page telling me to go d/l some other softwares. i use mcafee and i thought that would work but nope. i tried to block my IE but i still got these system warnings. i used adaware and spybot but it kept coming back...

i was so close to formatting my entire computer until i decided to check out the tech forum...
and viola!! i did the system restore point thing and it worked!
now i hope that it stays this way.... phew.gif
aznxinvazn
QUOTE(vietmatch @ Nov 8 2005, 04:12 PM) [snapback]611747[/snapback]

thanks for the spy ware!!! biggrin.gif

Well, I'm glad you like the spyware. wink.gif
cystaltears
eh...what if my spyware is so intense that it wont even let me open adware...and my antivirus program? and i constantly have popups
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.