DMusic.com | for indie musicians and fans | Free MP3 music downloads - Forums: Help: Help!!! I've been attacked by spyware!

Electric guitars, Classical guitars, Guitar amps and more.

zZounds.com offers recording equipment for starting and experienced musicians. Find the best prices on electric guitars, acoustic guitars, classical guitars and more.

Forums > Help

Help!!! I've been attacked by spyware!

onewhodreams	Date: May 3, 2004 @ 12:43 PM I have downloaded 5 Spyware Programs in the last few days(Ad-aware, Spyware Killer, Spyware Blaster, Hijack This, and Bazooka) and I can't get rid of all of it. Bazooka says I still have 6 objects and I can't manually get rid of them. I don't know what else to do?!?! Is it safe to shop online with spyware still on your computer? HELP!!!!!!
sqrlcub	Date: May 3, 2004 @ 3:47 PM SpyBot Seek and Destroy is really pretty good. It sounds like it is a set that you have to do before you boot up. After you download it, update it, and run it... it will give you an option to reboot on startup for anythign that it can't get rid of immediately. You may have to run it 2 or 3 times with the reboot but it is pretty thorough.
kredd	Date: May 3, 2004 @ 5:52 PM ad-aware has worked pretty good for me. http://www.lavasoft.de/
Woof	Date: May 3, 2004 @ 6:44 PM It really depends on what spyware you're finding... For example, Internet Explorer uses Alexa as part of its' programming, and only SpyBot actually replaces the "bad" Alexa files, with dummy files... if you try removing those any other way, you'll wind up with a version of Internet Explorer that doesn't boot... it'll display error messages, and shut down. Some freeware or shareware programs also come bundled with adware (which is different than spyware). It's what allows the software to be distributed for free, because it's supported by advertising, much like some websites are supported by ad banners and popups. Disabling the adware could also damage the functionality of the programs that are supported by it. Other programs, like BlazeFind, are a real pain to remove, because it's not just one program... there are something like three programs that BlazeFind installs, and unless you remove all three, you'll still have stuff on your 'puter that's bad. Then there's licensing software. Some of this is detected as spyware or adware, but it's there to hold on to the registrations for software you're using. Remove it, and your programs suddenly become unregistered again! Of course, some spyware/adware detectors, like SpyBot, also check for a few basic trojans and other viruses. Sometimes, they'll find things that you really ought to be using an antivirus program to remove... have you scanned your system for viruses? Your best bet? List the programs that your detectors are finding, and we'll try to help you out.
Woof	Date: May 3, 2004 @ 7:37 PM Oh DUH... I forgot to mention... When you use Spybot, and also Ad-Aware, they KEEP backup copies of the files they removed, in a special quarantine folder... so that the spyware can't function... BUT... it's still technically on your computer... Soooo... if you remove program files with, say, Ad-Aware, and then scan with SpyBot, SpyBot will find the programs in the Ad-Aware backup directory, and detect that you still have spyware on your machine...
thedarkaeons	Date: May 3, 2004 @ 8:22 PM Don't use IE, use Mozilla or Firefox.
onewhodreams	Date: May 3, 2004 @ 8:54 PM "have you scanned your system for viruses? Your best bet? List the programs that your detectors are finding, and we'll try to help you out." Yes, I also have Norton Anti-Virus and it finds nothing. All the programs except Bazooka find nothing, but Bazooka found 6 and they are: BookedSpace Cydoor HelpExpess Internet Optimizer MS Media Player GUID SeekSeek I tried to uninstall Cydoor by downloading their uninstall program from their website only to find out it did not uninstall (surprise surprise!) and I immediately had SeekSeek, which was not there before I tried to uninstall. So, needless to say this crap is driving me nuts!!! I've heard about Mozilla but have never tried it.
woodhead	Date: May 3, 2004 @ 8:54 PM ad-aware has worked well for me also
johnnygnote	Date: May 3, 2004 @ 9:30 PM OK now first of all Adaware will also remove Alexa, a lot of times the spyware will plant script in your registry, this will load at logon to your system. Because they are running they will not be removed. So while you are at your desktop screen do a control, alt, delete so your task manager comes up. Try to identify the running spyware, I know this sounds difficult but it's not, a good thing to do (it's tedious but works) is to take the names of the files you see in your task manager and run a search on the internet using the names of the files. There are several sites that will help you to identify the necessary running progs from the spyware. http://www.techsoup.org/howto/articlepage.cfm?ArticleId=539 http://www.lasa.org.uk/knowledgebase/pages/tsremovespyware.shtml http://www.expresscomputeronline.com/20030915/techspace01.shtml http://support.microsoft.com/default.aspx?scid=%2Fdirectory%2Fworldwide%2Fen-gb%2Ftask.asp Here's a few necessary progs listed http://www.wintrouble.net/discus/messages/2237/2993.html?1001255035 and here's some typical ones that are usual, EXPLORER Mailsvr Qhm32 Essspk bttnserv Hidserv PCTvoice Systray BUt like I said if you type in the name of any prog on google it will come up with sites to explain if they are good or bad. Once you figure out which progs are bad, end them in task manager, then run your spy detection ware. You should be able to remove them once they hgave been stopped in task manager. Also even though I have decent virus ware and update riteously, as well as a great firewall. I do a scan at http://www.ravantivirus.com/scan/ it always finds what my virus ware doesn't and tells you where the "worms" Trojans, or virus is. Also if you don't have one get a firewall here's a good free one http://www.agnitum.com/download/outpost1.html Screw Zonealarm, this ones better. and go to Shields Up, https://grc.com/x/ne.dll?bh0bkyd2 This site will scan your system and let you know how vulnerable you are to attacks by worms trojans and hackers. Good luck, J
Woof	Date: May 3, 2004 @ 9:55 PM Okay, here we go... First off, Cydoor should be gone. Either Ad-Aware or Spybot would have gotten rid of it, so the chances are it's stored as backup files in one of your spyware remover programs' backup folders. You'll want to check that, and delete the backups if you find 'em there. Like I said, it's possible that's what Bazooka's seeing... Second, spyware detectors usually detect cookies as spyware and adware as well... have you purged your cookie cache? Karenware has a freeware program that'll locate and offer you the option of deleting your cookies in Internet Explorer, if you'd rather not do it manually: http://www.karenware.com/powertools/ptcookie.asp Or you can also use the free trial version of Window Washer to do this: http://www.webroot.com/wb/products/windowwasher/index.php Johnny's right... a lot of times, even after you've uninstalled a program, registry entries will be left. It's best to let SpyBot take care of getting rid of those... Try these steps, and let us know what you find... and don't forget to delete any backed up files in ALL of your spyware remover programs, before you scan again...
onewhodreams	Date: May 3, 2004 @ 10:50 PM Ok - Wow I will try all this and see what happens. It may take me awhile but I will let you know how it goes. Thanks
onewhodreams	Date: May 5, 2004 @ 1:02 PM OK - I got rid of Cydoor. It was hanging out in Ad-aware just as you said. Spyware Blaster says there are 2869 items in the database but when I go into my computer to try and find the database there are only DTB files and when I open them they are just a huge list of numbers? ??
Woof	Date: May 5, 2004 @ 2:24 PM It depends. If you're talking about the Spyware Blaster database, that's the list that Spyware Blaster uses, to determine what spyware or adware to look for, much like an antivirus program has "virus definitions" to work with. If that's the case, Spyware Blaster is just telling you that it's programmed to look for 2869 different spyware and adware programs, when it scans your machine, and that's normal. The list of numbers in the dtb files, then, would be the code your program uses when it runs. If Spyware Blaster finds the dtb files during a scan, and tells you that they're spyware, that's a different story, and that would be more of a problem. I just hope that's not the case, 'cause things could get fairly complicated then. At this point, I'd try doing a scan with SpyBot, and see if it's still finding anything... SeekSeek and Internet Optimizer are the next ones to focus on. They sound pretty bad. MS Media Player GUID is actually a function of Windows Media Player, and Bazooka's website has some useful information there, as to how to deal with that. You need to set a couple of options in Windows Media Player, before GUID can be totally disabled, and yes... it's a good idea to disable it. Mostly, it's just a matter of checking or unchecking a couple of features in the Media Player preferences menu, and then letting Bazooka do its' job. One last thing... for now... As I mentioned earlier, some programs depend on adware to run, so don't be surprised if one or two programs begin to not work as well as they used to (if they work at all). I'm not talking about the Windows operating system or anything huge like that... that ought to be fine. But you might find a couple of shareware or freeware programs you've been using won't work now. It's best to assume it's because they contained adware, uninstall them, and then decide if you want to reinstall 'em, and live with the adware. Adware can't hurt you. It's just annoying is all. Spyware and hijacker programs are much more of a problem... It sounds like SeekSeek, Help Express, and Internet optimizer are that kind of program, and should be gotten rid of. When all of this is done, and your machine is cleansed, I'd actually recommend purchasing Window Washer, and if you're using Internet Explorer, there's a great popup killer called GuardWall, that also purges your history, cookies, and cache, every time you finish browsing the web... it does this automatically every time you close Internet Explorer. The only drawback is, when you go to shop on the web, you've got to fill out those forms every time you want to make a purchase. But that's better than having cookies track your web browsing habits, in my book. Keep us posted on any progress you're making... and hope this helps...
figfarmer	Date: May 6, 2004 @ 9:44 PM Hijack This might help too,
Apertome	Date: May 8, 2004 @ 5:17 PM Well it sounds like you are getting some good help. One thing I disagree with is making a distinction between adware and spyware. There is really no way to tell what "adware" is doing besides displaying ads. As far as I'm concerned, adware IS spyware, but obviously this is a matter of opinion.
onewhodreams	Date: May 9, 2004 @ 9:35 PM Thanks to Mr. Woof, all my problems are solved. Thank You again Mike

Post A Reply
From:	guest	(Icons - Linking)
Post:

© DMusic LLC - Advertising | Employment | TOS | Subscribe