Spyware Help!
Spyware Help!
my laptop has been hyjacked by spyware.. I have run search and destroy many times.. what other good FREE ones are there??? this crap even deleted my AOL icon and replaced it with a bunch of spam on my desk top
05-06-2004, 09:57 PM
#2
Registered
Join Date: Sep 2002
Location: Lewis Center, Ohio
Posts: 3,606
Likes: 0
Received 0 Likes
on
0 Posts
05-06-2004, 10:04 PM
#3
Registered
Join Date: Jan 2003
Location: Chapin (Lake Murray), South Carolina
Posts: 1,569
Likes: 0
Received 0 Likes
on
0 Posts
There has been a nasty little bastard going around in the last week that puts an ini file called Dpusys on your drive that is linked to an executable file that replicates itself. Spybot will get rid of it adaware will not:
spybot
If you have this problem the key is after you run it, it will tell you that it needs to shut your computer down to get rid of everything. If you don't let it shut down it will replicate itself and not be gone.
Good luck
spybot
If you have this problem the key is after you run it, it will tell you that it needs to shut your computer down to get rid of everything. If you don't let it shut down it will replicate itself and not be gone.
Good luck
05-06-2004, 10:07 PM
#5
Man I hate spyware. Not sure what systen you are running. Long but this is some info I picked up. Nice signature! 
Good luck.
Special Note for XP users:
right-click My Computer, Properties, System Restore, and uncheck the box to have System Restore active on all drives. Do this first. When you have finished the steps below, re-enable System Restore.
Special Note for all:
You want to run the antivirus, spyware, adware, and other utilities without IE active, and without any Peer-2-Peer application active, such as eDonkey, Kazaa or eMule. Your success with any of the tools below approach 100% if no internet application is currently active. A tip of my hat to forum member SYAR2003 for reminding me of the importance of this step.
1. If you have an antivirus program installed (and you should) update the virus definition files and do a complete and thorough scan. Allow your antivirus program to do its job quarantining and removing any malware it discovers.
2. In addition, run at least one online antivirus scan from smah's FAQ: FAQ760-3862
I have never seen a single antivirus program that caught everything.
3. Download, update within each program and run these three troubleshooting tools, in the order given:
. cwshredder
. SpyBot
. AdAware
Cwshredder, Hijack This:http://www.spywareinfo.com/~merijn/downloads.html
Mirror site: http://www.lurkhere.com/~nicefiles/
AdaWare: http://www.lavasoftusa.com/support/download/
4. Reboot. Test to see if your IE or other browser or mail client issues have been resolved.
5. If still no joy: (this will not do harm)
. Download and run the LSPfix utility: http://www.cexx.org/lspfix.htm
6. If still no joy: (this will not do harm)
. Download and run the Winsock repair utility: http://members.shaw.ca/techcd/VB_Pro...nsockFix.zi...
Discussion: FAQ779-4625
Reboot. If it is still problematic, post the Hijack log on the site.
Hijack This! can be downloaded from: http://www.spywareinfo.com/~merijn/downloads.html
Mirror sites: http://www.lurkhere.com/~nicefiles/
My own good guess is that if you take the steps above there will be no need to post a Hijack log here. But if you still have problems:
. State the problem first. Your homepage is hijacked to the wrong site; I cannot access the internet at all; I receive pop-ups I do not want; my Favorites list is now populated with porn sites; etc. Be as specific as possible in the first lines of your post.
. Hijack This has the option to update the program on-line. Do so, and then if available exit the original version and run the new.
. Post the complete log here. Sometimes the problem lurks in a section that may not seem important to you.
. Now post the log generated with a click on the Scan button.
Usually someone will see your log file and give specific advice about what to remove with Hijack, or in combination with other instructions.
Remember that you can always run Hijack again and revert any changes suggested by a poster. Hijack lists a great deal of information, and it can happen that something removed is important to your system. Run Hijack again and revert the change. Reboot. The horrible fact of the mattter is that bad guys often hide under the name of good guys. Removal of all the bad guys is an imperfect process, and it may take more than one scan to complete the job.
Good luck.Special Note for XP users:
right-click My Computer, Properties, System Restore, and uncheck the box to have System Restore active on all drives. Do this first. When you have finished the steps below, re-enable System Restore.
Special Note for all:
You want to run the antivirus, spyware, adware, and other utilities without IE active, and without any Peer-2-Peer application active, such as eDonkey, Kazaa or eMule. Your success with any of the tools below approach 100% if no internet application is currently active. A tip of my hat to forum member SYAR2003 for reminding me of the importance of this step.
1. If you have an antivirus program installed (and you should) update the virus definition files and do a complete and thorough scan. Allow your antivirus program to do its job quarantining and removing any malware it discovers.
2. In addition, run at least one online antivirus scan from smah's FAQ: FAQ760-3862
I have never seen a single antivirus program that caught everything.
3. Download, update within each program and run these three troubleshooting tools, in the order given:
. cwshredder
. SpyBot
. AdAware
Cwshredder, Hijack This:http://www.spywareinfo.com/~merijn/downloads.html
Mirror site: http://www.lurkhere.com/~nicefiles/
AdaWare: http://www.lavasoftusa.com/support/download/
4. Reboot. Test to see if your IE or other browser or mail client issues have been resolved.
5. If still no joy: (this will not do harm)
. Download and run the LSPfix utility: http://www.cexx.org/lspfix.htm
6. If still no joy: (this will not do harm)
. Download and run the Winsock repair utility: http://members.shaw.ca/techcd/VB_Pro...nsockFix.zi...
Discussion: FAQ779-4625
Reboot. If it is still problematic, post the Hijack log on the site.
Hijack This! can be downloaded from: http://www.spywareinfo.com/~merijn/downloads.html
Mirror sites: http://www.lurkhere.com/~nicefiles/
My own good guess is that if you take the steps above there will be no need to post a Hijack log here. But if you still have problems:
. State the problem first. Your homepage is hijacked to the wrong site; I cannot access the internet at all; I receive pop-ups I do not want; my Favorites list is now populated with porn sites; etc. Be as specific as possible in the first lines of your post.
. Hijack This has the option to update the program on-line. Do so, and then if available exit the original version and run the new.
. Post the complete log here. Sometimes the problem lurks in a section that may not seem important to you.
. Now post the log generated with a click on the Scan button.
Usually someone will see your log file and give specific advice about what to remove with Hijack, or in combination with other instructions.
Remember that you can always run Hijack again and revert any changes suggested by a poster. Hijack lists a great deal of information, and it can happen that something removed is important to your system. Run Hijack again and revert the change. Reboot. The horrible fact of the mattter is that bad guys often hide under the name of good guys. Removal of all the bad guys is an imperfect process, and it may take more than one scan to complete the job.
05-06-2004, 10:10 PM
#6
Platinum Member
Platinum Member
Join Date: Apr 2001
Location: Beautiful Fort Lauderdale www.cheetahcat.com
Posts: 10,833
Likes: 0
Received 6 Likes
on
6 Posts
Spy Sweeper gets all the gremlins.. The Bullcrap is they allow people to put programs in our systems that report all kind of things, You cant tap a phone without a court order but yet this is allowed in an area with Credit card numbers and all kinds of personal info;Our PC's
05-06-2004, 10:17 PM
#9
Registered
Join Date: Jan 2003
Location: Chapin (Lake Murray), South Carolina
Posts: 1,569
Likes: 0
Received 0 Likes
on
0 Posts
Originally posted by packinair
that is the MOFO that is on here
that is the MOFO that is on here
You can also boot it up in safe mode and get rid of it but that way is a lot more compicated.
and found nothing !
