Edit

Forums
Technology

Standard Procedure for Removing Spyware, Adware, Malware or Other Parasites -<<Updated May - 04 - 2005>>- Archived From: Technology

  • tweet this
  • Post to Facebook
  • Text Only
  • Search this Topic »
  • Classic
  • Go to Page :
  • 1 2 345
alert mods    

sry


alert mods    

PepiMK's CoolWWWSearch.SmartKiller removal tool~~ when i click on that link, i get a 'no page to display' message.
i need that fix very badly.
btw, all my pop-up windows are sticking on the lower 1/3 of my screen. why & how to fix.


alert mods    

ohsexygirlfriend said:PepiMK's CoolWWWSearch.SmartKiller removal tool~~ when i click on that link, i get a 'no page to display' message.
i need that fix very badly.
btw, all my pop-up windows are sticking on the lower 1/3 of my screen. why & how to fix.

Try the link for "CoolWWWSearch.SmartKiller (v1 and v2)" as this is the same thing, but a different link.


alert mods    

Very nice post DragonsLore. I would also highly recommend people to use Firefox browser or any other browsers out there instead of Internet Explorer whenever possible, since they don't have Active X in them which can let spyware in too.

Firefox Browser (free)


alert mods    

i ran spyware S&D and adware and the new microsoft thing and my comp still runs abnormally slow


alert mods    

redroomblackout said:i ran spyware S&D and adware and the new microsoft thing and my comp still runs abnormally slow

Those tools and many others are mostly for system maintenance and protection.

There are many things that can cause your system to run slow including parasites.

But if you are having a problem, the best thing you could do is to run HiJackThis, then post the resulting HJT log to one of the security forums and wait for a response. The trained personnel there will be able to help you.

If you do post your HJT log to the Spywareinfo fourms, it would need to be posted in the first forum which is the Malware Forum. Also be sure to read the first sticky which is by PGPhantom.

Good Luck


alert mods    

OD, you need to update the year on the title, we're at the new year of 2005 now.


alert mods    

Thanks!

I must have been tired not to have noticed I put the wrong year!


alert mods    

I spent 2 hours disinfecting a trojan from a system today. Every scanner with most recent updates missed it. It installs itself in c:\\\\system volume information\\\\upnpclient.exe. It appears to use port 25, the MS UPnP port as a back door. It runs two services, both UPnP clients. It's easy to remove if you disable simple file sharing to access that folder. It was blocked by my firewall, but was eating enough cycles that I noticed a typing lag. Heres the relevant hijackthis log line:

O23 - Service: Universal Plug and Play Device Client - Unknown - c:\\\\System Volume Information\\\\upnpclient.exe (file missing)

I've seen this type of exploit before, but this appears to be a new one the scanners are missing. I even run Pestpatrol in active mode and it blew past it. It apparently came packaged in a small file viewer installer I downloaded from a newsgroup post. The file passed the AV scan as clean. In this case I broke my own rules about knowing the source and got burned.

edit: If you have this thing it's a bigger security risk than I originally thought. One package is a password/CC# logger. There's a good discussion on Wilders Security on detection/removal: link
This thing hasn't been added to any of the AV software updates as of this entry.


alert mods    

bonkers said:Very nice post DragonsLore. I would also highly recommend people to use Firefox browser or any other browsers out there instead of Internet Explorer whenever possible, since they don't have Active X in them which can let spyware in too.

Firefox Browser (free)

If anyone needs anymore convincing then read this, Three unpatched flaws in Internet Explorer now pose a higher danger!


alert mods    

NONE OF THE SUGGESTIONS HERE RECOGNIZE YAHOO'S "Web Beacons". HOW DO WE KNOW IF THIS IS SPYWARE IS ACTIVE?

From another post:

Yahoo is now using something called "Web Beacons" to
track Yahoo Group users around the net and see what you're doing
and where you are going, similar to cookies.

Yahoo is recording every website and every group you
visit. Take a look at their updated privacy statement:
Yahoo
(http://privacy.yahoo.com/privacy)
Here's how to opt out!!!

About half-way down the privacy statement page, in the
section on cookies, you will see a link that says web beacons.

Click on the phrase web beacons. That will bring you
to a paragraph entitled "Outside the Yahoo Network."
In this section you'll see a little "click here to opt
out" link that will let you opt-out of their new
method of snooping.

Once you have clicked that link, you are exempted.

Notice the "Success" message on the top of the next
page.

DO NOT hit the "Cancel Opt-out" button ... if clicked,
it will *undo* the opt-out. Feel free to forward this
to other groups or folks you know have Yahoo accounts Yahoo


alert mods    

Web beacons are not spyware at all.

Instead, they are similiar to a cookie as it can be used to track your movements across the web.

This is also not a new technology as it has been in use for a while now, but Yahoo has decided to give them a new name.

A web beacon is basically a small image such as a 1 x 1 pixel clear image which is used in conjunction with a cookie.





Matter of fact, such tools as Hosts Files, SpyBot-S&D and SpyWareBlaster can block web beacons simply by blocking the Host address the web beacon originates from.

But if the image used for the web beacon uses the same address as the web site you're visiting, then you'll lock yourself out of the website if you try to block it.

Typically, many websites will use subdomains for such stuff as images, cookies and other items. So instead of blocking the website domain, you would block the subdomain that the image comes from.

Matter of fact, I think there is some tools out there which can specifically block web beacons themselves, but I do not remember the names of these particular pieces of software. They should be easy enough to find though.

Web beacons are not something that infects your system and as I have said, they are not spyware, so as such, there has been no need to cover web beacons in the above article.


alert mods    

Windows XP has done it again.

The beta version of windows antispyware is out.
It rocks. Nothing like PK2. I am surprise by the number of hits it had despite the regular other programs already running (Spybot, adaware etc).
I am convinced its a must for every xp user. Gives you a full description of the catches and even references to read more about the property of the malwares. Has a protection against the hijacking your home page, severity gauge etc. Best of all its free.

Here is the link:
Microsoft's beta v. antispyware


alert mods    

If you had read the article above, you would have seen that there is already a link to the MS AntiSpyware webpage.

This tool hold some real promise, but at the same time, do not rely on this tool alone as no single tool can handle all of the various parasites out there. Especially if yoiu happen to get infected by some of the really bad ones.

Also, knowing Microsoft, this tool will most likely only remain free until it is no longer a beta after which they will most likely chatge for it.

If they decide not to chare for this tool, then this would be something very unusual for them to do.


alert mods    

Here's some software that is being offered for free to home users:

http://www.prevx.com/prevxhome.asp

It pro-actively prevents spyware, adware, worms, etc. from being installed on your PC in the first place.


alert mods    

Note some of the links to the tools, like FindnFix now lead to a dead link.


alert mods    

hi, for some reason, the idle time set before my screensaver turns on changed to 180 minutes from 1 minute.
why would something like this happen?
i live in a dorm, and my door is usually unlocked. do you think someone came in and did something to my computer when i went out, but before the 1 minute idle time and changed the idle time from 1 min to 180?
i set the password required for logging in back from the screensaver.
i scanned my computer with mcafree virus scanner, adaware, and spybot and found nothing unusual.
i hope no one took my files off my computer.


alert mods    

RShea said:Note some of the links to the tools, like FindnFix now lead to a dead link.
The link in this article is still good as it leads to another website.

If you look at the download link on that site, it's for downloads.subratam.org

Either that site is having a problem or they misplaced the file.

www.subratam.org needs to be alerted as to the problem.


alert mods    

titewad said:Here's some software that is being offered for free to home users:

http://www.prevx.com/prevxhome.asp

It pro-actively prevents spyware, adware, worms, etc. from being installed on your PC in the first place.
DragonsLore - what are your thoughts on this tool?


alert mods    

From what I could find out about it, it is a good tool which is being used in the security forums.

BTW.....

I thought I had replied to this question in another thread which was posted asking about this tool?

As I stated earlier, when I get around to updating this thread, I will be adding this tool to the list along with some others.


 Close

Sign Me In
Nickname: 
Password: 
Remember My Login Information:

Forget your login information?

Not Already A Member?
Sign Up Now!



Disclaimer: By providing links to other sites, FatWallet.com does not guarantee, approve or endorse the information or products available at these sites, nor does a link indicate any association with or endorsement by the linked site to FatWallet.com.


While FatWallet makes every effort to post correct information, offers are subject to change without notice.
Some exclusions may apply based upon merchant policies.
© 1999-2009