Spyware

[Greg-VT]

Hey

Topic for today is Spyware.

I recently downloaded a program called SpyHunter. It is supposed to find, and remove (not with trial version) Spyware and Adware from the computer.

Well I got the Trial, and it picked up about 100 reg entries, cookies, and files (exe's). The thing is becasue it is a trial, it won't remove them..

So, does anyone have a good proggie that will do the job? I also want to be sure that it won't add more for itself.

I know there is heaps out there.... and like I said, I want to be sure it won't add it's own *ware.

If any of you could help with any suggestions, that would be great.

Thanks.

[Cain]

Check my thread on must have programs, I use spybot, the link is in there.

|Cain|

[Greg-VT]

Thats great mate. Thanks alot.

Worked like a Charm :D

[Cain]

No prob, there's several more like spycop but I hav'nt got the link for it :(

Yet ;)

Also spybot is regularly updated, check for updates often!

|Cain|

[Saz]

Yup, Spybot is fantastic. Just update it before you run it so it catches all the new stuff.

Clearing out the cookies every so often gets rid of a shed load of Spyware. Since I started using Opera as my browser, I get hardly any. You can get it off "free" programs too, most famously, Kazaa Media Desktop (Kazaa lite is clean)

[neryo_tkd]

Yup, Spybot is fantastic. Just update it before you run it so it catches all the new stuff.


I ran Spybot and it removed several threats, but afterwards Norton still found several more which it can't delete. How come is that?

[Saz]

Spybot removes Spyware

Norton removes Virus's.

They're two different kind of program. Norton won't pick up spyware, Spybot won't pick up virus's.

If Norton can't delete them, try and get it to Quarrantine them instead.

[Kwajman]

I use spybot at home and it seems to work really well. I know the IT department at the place I work installed it also on the corporate servers. Made me feel better.

[Saz]

We use it at work now. We used to use Ad-Aware, but this is way better.


Neryo, feel free to get in touch if you need any assistance.

[KickChick]

Have to say that my SpyHunter has found "objects" that my SpyBot did not.
(Programs to detect and remove spyware)

I also use SpywareBlaster (to prevent the installation of spyware)
SpywareBlaster is the original anti-spyware protection.
Developed in 2002 to help users prevent spyware installs, SpywareBlaster pioneered the effective use of prevention techniques to reduce or greatly eliminate spyware-related problems, as well as problems related to other unwanted software such as dialers, browser hijackers, and adware.

Good site for further info ... http://www.spywareinfo.com/downloads.php

[Saz]

Did you update Spybot?

Spybot can 'immunize' you against spyware, or just don't use IE like me :D

[Cain]

I have this good proggy called TSD or something, spybot is aimed toward more adware and the major spyware while TSD is more aimed towards spyware, also includes a port scanner/remote scan etc a lot actually, it's a trial version unfortunately......I'll dig up the link in a few mins

|Cain|

[hongkongfuey]

Spybot is very good.

Also the enterprise version of McAfee virus scan can be set to remove spyware, malware, and 'fun programs' such as Christmas screensavers etc. My poor users won't have any fun once that is installed!

[Saz]

One word... Active Directory Policy!

We have one in work for the mere mortals, and they can't do ANYTHING! :D

[Greg-VT]

Have to say that my SpyHunter has found "objects" that my SpyBot did not.
(Programs to detect and remove spyware)

I also use SpywareBlaster (to prevent the installation of spyware)
SpywareBlaster is the original anti-spyware protection.
Developed in 2002 to help users prevent spyware installs, SpywareBlaster pioneered the effective use of prevention techniques to reduce or greatly eliminate spyware-related problems, as well as problems related to other unwanted software such as dialers, browser hijackers, and adware.

Good site for further info ... http://www.spywareinfo.com/downloads.php

How much are they paying you? :D Wanna put in a good word for me? I could always use a second job... :D

[neryo_tkd]

Spybot removes Spyware

Norton removes Virus's.

They're two different kind of program. Norton won't pick up spyware, Spybot won't pick up virus's.

If Norton can't delete them, try and get it to Quarrantine them instead.

That's the thing, I can't Quarrantine them. When I want to delete those adware threats, it says 'failed' and that's about it. Nothing seems to work.

[Saz]

Try booting into Safe Mode and running it from there?

[Greg-VT]

They're two different kind of program. Norton won't pick up spyware, Spybot won't pick up virus's.
Norton does detect spyware/adware, aswell as virii. It most cases it does delete the ad/spyware it detects. But, being that it's not a full adware removal program, it will not detect 100% of what is on your system.

And it may even not be able to delete some at all -typical norton. Lets you know your computer is infected, but then does nothing about it! :rolleyes: :D

Download Spybot, and then update it. Run the scan, and it will remove the *ware

[hongkongfuey]

That's three words K.

My one word is :

Active Directory Group Policy
Virus Scan Enterprise
SMS
ISA with content filters / usage reports to Head of departments.
MessageLabs Anti-virus
GFI Mailsweeper for content scanning

My users can do LESS than nothing!

[com160]

http://www.io.com/~cwagner/spyware.html

[neryo_tkd]

Try booting into Safe Mode and running it from there?
Tried that as well, but to no avail.


Norton does detect spyware/adware, aswell as virii. It most cases it does delete the ad/spyware it detects. But, being that it's not a full adware removal program, it will not detect 100% of what is on your system.

And it may even not be able to delete some at all -typical norton. Lets you know your computer is infected, but then does nothing about it! :rolleyes: :D

Download Spybot, and then update it. Run the scan, and it will remove the *ware

I've got Norton Professional 2004 and it detects the *ware but it won't delete them. My Spybot is updated because it says that there are no newer versions. Spybot removed some of them but Norton kept finding more threats afterwards. Norton found adware.lop on my PC.

HEEEEEEEEEEEEEELLLLLLLLLLLLLLLLLLPPPPPPPPPPPPPPP :cry:

[Saz]

That's three words K.

OK, OK, Don't be picky :P

My one word is :

Active Directory Group Policy
Virus Scan Enterprise
SMS
ISA with content filters / usage reports to Head of departments.
MessageLabs Anti-virus
GFI Mailsweeper for content scanning

My users can do LESS than nothing!

Sounds like a very similar system to the one we have, minus the Content filters. Certain sites are just automatically blocked out (ebay etc). Messagelabs are meant to be excellent, and supposedly offer a large amount of cash if a virus gets through their system.

Is SMS the remote connection software? We use that and its great.

[Saz]

Tried that as well, but to no avail.

I've got Norton Professional 2004 and it detects the *ware but it won't delete them. My Spybot is updated because it says that there are no newer versions. Spybot removed some of them but Norton kept finding more threats afterwards. Norton found adware.lop on my PC.

HEEEEEEEEEEEEEELLLLLLLLLLLLLLLLLLPPPPPPPPPPPPPPP :cry:

What virus's is Norton finding?

[jokerlaughsatu]

The ultimate defense is having a mac.

We are the invincible Apple Army

Join us

Become one with us

[Saz]

That just goes to show, you can't get ANYTHING working right on a Mac ;) :D

[WhiteWizard]

The ultimate defense is having a mac.

We are the invincible Apple Army

Join us

Become one with us
bwahahahahahahahhahahahhahahahahahhahahahahahhahah ahahahahahhahahahahahhahahahahah

Its been a while since i laughed that much :D

[hongkongfuey]

The ultimate defense is having a mac.

aha - security by obscurity!

[Nukie]

HEEEEEEEEEEEEEELLLLLLLLLLLLLLLLLLPPPPPPPPPPPPPPP :cry:

um.. what is the *ware that norton is findin?? click on it and go to the symantec website for information on removal....

it may have made an entry in the registry under current version -> run ..to start a dll file on system startup... if so, delete the registry file which is resonsible for startin the dodgy .dll.. and restart your computer.. then delete the offendin .dll!

if its an exe then check the list at http://www.liutilities.com/products/wintaskspro/processlibrary/ to make sure its definitely not a system tool, close it thru task manager and delete.. just be careful u don't get the wrong one tho!

[Greg-VT]

Ahem, Sorry to jump back in here.

I'd just like to copyright *ware.


Thankyou,
:D

[Saz]

Whats all that *ware about anyway?

[Greg-VT]

Ad/Spy ware. :p

Thats 6 keystrokes more then *ware :D. Unless you count the 'shift' key, which makes it only 5 more. ;)

[neryo_tkd]

NoAdware found LOP and HuntBar on my computer but I can't remove them with NoAdware unless I purchase it. So I found the location of these threats and I've managed to delete 4 of them. There are still several left that I can't delete. Some of them are 'file', 'folder' and some of them are 'registry key' but every time I click on delete I get a message that the file is used by another application that I should close or that there is an error, the disc is write protect blah blah blah something like that.

There are 3 threats the location of which I can't find and don't know what to do with (Damn computers, hate when this happens :woo: ) for example:

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/Current version/Run: winactive

And there are 3 threats with similar location. Does anyone know what I'm supposed to do with them?

[Greg-VT]

Get Spyspot. It will find them (with updates) and remove them.

And it's free.

[Nukie]

NoAdware found LOP and HuntBar on my computer but I can't remove them with NoAdware unless I purchase it. So I found the location of these threats and I've managed to delete 4 of them. There are still several left that I can't delete. Some of them are 'file', 'folder' and some of them are 'registry key' but every time I click on delete I get a message that the file is used by another application that I should close or that there is an error, the disc is write protect blah blah blah something like that.

There are 3 threats the location of which I can't find and don't know what to do with (Damn computers, hate when this happens :woo: ) for example:

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/Current version/Run: winactive

And there are 3 threats with similar location. Does anyone know what I'm supposed to do with them?

Delete the winactive key from the registry.. restart your computer.. scan for winactive.exe and remove it.. its probably in System32.

Dunno bout the other ones cuz u didn't mention the names.. just make sure u don't go deletin the wrong file .. could make a rather expensive paperweight ;)

[neryo_tkd]

Delete the winactive key from the registry.. restart your computer.. scan for winactive.exe and remove it.. its probably in System32.


I've managed to delete it :) I got rid of the annoying toolbar :) Thank you very much. I appreciate it :)

[neryo_tkd]

I've been dealing with these damn threats for the past few days and I deleted most of them. Step by step everything is getting better. But could someone help me out with the following: when my computer is started a window opens and it says:

desktop - Notepad
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21787


What should I do with it? Delete shell32.dll or what?

[Nukie]

But could someone help me out with the following: when my computer is started a window opens and it says:

desktop - Notepad
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21787


What should I do with it? Delete shell32.dll or what?

No, you don't want to delete that.. tiz a system dll .. go here (http://support.microsoft.com/default.aspx?scid=kb;en-us;330132) and follow the instructions :woo:

[neryo_tkd]

No, you don't want to delete that.. tiz a system dll .. go here (http://support.microsoft.com/default.aspx?scid=kb;en-us;330132) and follow the instructions :woo:


Hey Nukie, you are the greatest. I followed the instructions and guess what: no more annoying desktop notepad windows.

Thanks a lot man!!!! :) :)

[Nukie]

Hey Nukie, you are the greatest. I followed the instructions and guess what: no more annoying desktop notepad windows.

Thanks a lot man!!!! :) :)

Cool.. glad you got it all sorted.. :cool:

oh and i didn't do anythin.. google did all the hard work :D