is anyone else infected with spyware?

[Anonymous2]

I half expected you to say that
That's what it did with my computer, too, it disappeared for a while and came back. You did the rebooting into safe mode, right? That's most essential.

Meanwhile, I found an even better program than Ad-Aware (at least that's what the experts say). It's called Spybot and when I ran it, after I thought I had cleaned my system completely, it found another 12 files that were infected. I really recommend this one, since it not only cleans but prevents new viruses from entering. It's a German program, but it's in English, too. Get it here:

http://www.chip.de/downloads/c_downloads_8833199.html

or on any other download site Google finds.

Again, if you want to post your HijackThis log here, I'll have a look at it and see if I find something.

Good luck, bro!

 

[snatcher069]

I use Opera and I still get gator and other spyware from time to time.

If you use IE, you might consider upgrading to Avant. It's a build-on to IE with better security features and a friendlier interface.

http://www.avantbrowser.com

I suggest following the link that Nightfly posted, to install adaware. It is a top notch program, plus they continually update the list of known spyware programs.

:hatsoff:

Dude, this browser rocks. It's much better than Firefox. Kudos!

 

[Goblin]

Already got Spybot. It was the first I tried. I got my system immunized but its changing the page back thats the problem.

Thanks anyways.

 

[Goblin]

Okay... There were three fixes I have found that are GUARANTEED to work for any computer.

First and Easiest: Just restore to a prior date. (This is what I did.)
You lose some files though.

Second: Delete IE and download another browser... Unfortunately Downloading IE again won't work as its not the program that is infected with the .dll Dialer.

Third: Find the dialer while in Safe Mode and delete it. (Good luck... I couldn't do it. But other forum people swear by this method. Its in your System32 file, but they keep respawning the .dll files. I couldn't figure it out.)

Downloading the programs above will prevent it from happening again, but won't get rid of the problem.

 

[Gordon Bennet]

How do you access your host file again? I remember that Freeones had a warning about something to do with that a couple of months back and thought that editing the host file may help me out.

 

[Gordon Bennet]

Oh, and what the folders that are needed to be scanned in Ad-aware? I know that I don't need to scan my whole C: drive.

 

[Goblin]

Id say System32 is where it found the stuff I got rid of. But they just come back. Ad-aware finds it... and fixes it, but it respawns from a different location every time you open your browser.

My THEORY is that when you open IE it has a homepage check. And it checks your default. The default is somehow changed to About:Blank. But I can't find where the IE default home page is.

Like I said... After searching the web for a good part of the day. Its better to just re-start from an old check point. I didn't lose any files. Just the programs I downloaded after getting it. (My files for games such as Warcraft 3 were unchanged just using an old system restore checkpoint from a couple days back.)

The host file is in Windows/System32/drivers/etc/

But I couldn't edit my host file.

 

[Gordon Bennet]

Do a google search for Grisoft AVG Anti-Virus. Its free and so far its been able to delete/heal nearly all the infected files its found. It works better than my PC-Cillin anti virus software, which I only use for a firewall.

I just opened up my host file, "HOSTS", and its a massive list of IPs and URLs.

 

[FreeOnes]

How do you access your host file again? I remember that Freeones had a warning about something to do with that a couple of months back and thought that editing the host file may help me out.

Check here:
http://www.hostones.com/virusinformation/

 

[FreeOnes]

Another interesting page:
http://www.spywareinfo.com/~merijn/cwschronicles.html

 

[Gordon Bennet]

Cheers FreeOnes.

 

[cloud20_2001]

My computer was scanned and was infected with like 100adware and i cant get rid of them. Was it that they do besides track your browsing habits? Can they get your personal information?

 

[Goblin]

Some copy your keystrokes... Most are just annoying pop-ups.

 

[cloud20_2001]

this might be a stupid question, what do you mean keystrokes? They cant get like your social or your credit card number or shit like that? thanks!

 

[Anonymous2]

this might be a stupid question, what do you mean keystrokes? They cant get like your social or your credit card number or shit like that? thanks!

That's exactly what may happen. Some of them record everything you type (your keystrokes). So if you enter your credit card information or your passwords or whatever, this may be recorded.

You said you couldn't get rid of the stuff you found when scanning. I think you should better take care of this. Most of what the scan found is probably just cookies and stuff from advertising companies, but some of it may be harmful. Download the programs mentioned earlier in this thread and try to clean up your system.

 

[NAMOR]

Just to add sometimes Ad-aware, Spybot, CWShredder, Spy Sweeper, etc dont catch all malware. So if your still getting pop-up, hompage hijacks, strange process running, or just wired browser problems your best bet is to use a small program called "HiJackThis". Download it, unzip it to a directory of your choice, click scan, click save log. and post ALL items in the log at any of the security forums listed below..

Computer Cops Forum > post under "Hijackthis - Spyware, Viruses, Worms, Trojans Oh My!":
http://www.computercops.biz/forums.html

MajorGeeks > post under "Spyware Specific":
http://www.majorgeeks.com/vb/

Wilders Security > post under "adware, spyware & hijack cleaning":
http://www.wilderssecurity.com/index.php

Dowload HiJackThis here:
http://www.computercops.biz/downloads-cat-14.html

Mini tutorial for HiJackThis:
http://www.computercops.biz/postt6393.html

 

[georges]

I use Opera and I still get gator and other spyware from time to time.

If you use IE, you might consider upgrading to Avant. It's a build-on to IE with better security features and a friendlier interface.

http://www.avantbrowser.com

I suggest following the link that Nightfly posted, to install adaware. It is a top notch program, plus they continually update the list of known spyware programs.

:hatsoff:

please help me

i have a problem when i click on avant icon the page loaded at 30% and then i have a impossible to display page. should i uninstall internet explorer? or what can i do so that it would work???

thank in advance

regards

georges

 

[georges]

i solved the problem my self. thanks to all the person who recommended avant browser. thank you very much.it is as fast as a dodge charger hemi daytona, this web browser is so fast that i should say that thing gotta hemi

have beer on me:glugglug::glugglug:

regards

georges

 

[foxycougar]

i solved the problem my self. thanks to all the person who recommended avant browser. thank you very much.it is as fast as a dodge charger hemi daytona, this web browser is so fast that i should say that thing gotta hemi

You're so funny, georges

 

[cloud20_2001]

Click Start, and then click Run. (The Run dialog box appears.)
Type regedit

Then click OK. (The Registry Editor opens.)


Navigate to the key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run


In the right pane, delete the value

"TB_setup"="<path to executable file> /dcheck"


Exit the Registry Editor.

I did that and I could not find the tb_setup, does that mean that I already deleted them or what?

Thanks for all the help everyone.