Specialty Forums Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home
General Forums Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2
Drivers Driver Scan
Driver Forum
Software Automatic Updates
BIOS Updates My Computing.Net Solution Center Free IT eBook Howtos Site Search Message Find RSS Feeds Install Guides Data Recovery About Home
Subject: Spyware remedies?
Original Message
Name: LinZ Date: May 2, 2008 at 06:21:52 PacificSubject: Spyware remedies?OS: Windows XPCPU/Ram: Intel Pentium; Inspiron 9Model/Manufacturer: Dell
Comment: I know there are at least two other topic on this page that deal with spyware removal programs, but I have tried several of the rograms already mentioned, none of them yielding success.I have used the following:
Each time I have scanned my system, these programs have picked up the exact same infections. Here is what has been found since my last scan:
2020Search
There's also a few Trojans on here that I do not yet know the name of.
Any suggestions for courses of action that do not involve re-installing Windows?
Become one with your computer.
Report Offensive Message For Removal
Response Number 1
Name: Adii Date: May 2, 2008 at 12:12:15 PacificSubject: Spyware remedies?
Reply: (edit )Download the "HijackThis" Installer from this link: http://www.trendsecure.com/portal/e...
Post Hijackthis Log in your next reply.
*Do Safe Computing*
Report Offensive Follow Up For Removal
Response Number 2
Name: LinZ Date: May 2, 2008 at 15:08:46 PacificSubject: Spyware remedies?
Reply: (edit )Adii,As per your request, here is the log file from the scan:
C:\WINDOWS\System32\smss.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway http://home.peoplepc.com/search http://www.hotmail.com/ http://www.dell4me.com/myway http://us.rd.yahoo.com/customize/ie... http://www.yahoo.com/ http://home.peoplepc.com/search http://us.rd.yahoo.com/customize/ie... http://gfx2.hotmail.com/mail/w2/pr0... http://www.worldwinner.com/games/v4... http://www.shockwave.com/content/di... http://www.sidestep.com/get/k42037/... http://go.divx.com/plugin/DivXBrows...
______________________________________
I took this into the HiJackThis analyzer and had it remove all the offending files...but they were still there after I restarted and ran a second scan. Stubborn files, apparently.
Become one with your computer.
Report Offensive Follow Up For Removal
Response Number 3
Name: Jeruvy Date: May 2, 2008 at 15:13:56 PacificSubject: Spyware remedies?
Reply: (edit )Most of those you listed in your first post will prevent any easy cures.Also post a full HijackThis log please, yours is missing information. Make sure you don't word wrap or mess up the line formatting posting it here.
Also don't perform any 'fixes' until you've had a professional review and advise you what to do.
Also try not to run a lot of processes in the background while your fixing the PC.
J. j e r u v y a t y a h o o d o t c o m
Report Offensive Follow Up For Removal
Response Number 4
Name: LinZ Date: May 2, 2008 at 16:58:32 PacificSubject: Spyware remedies?
Reply: (edit )I only deleted the size of the log file at the bottom of the page and my system info at the top. Sorry about that - I didn't think it was important.Here is the full text of the log file:
Logfile of Trend Micro HijackThis v2.0.2
Running processes:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway http://home.peoplepc.com/search http://www.hotmail.com/ http://www.dell4me.com/myway http://us.rd.yahoo.com/customize/ie... http://www.yahoo.com/ http://home.peoplepc.com/search http://us.rd.yahoo.com/customize/ie... http://gfx2.hotmail.com/mail/w2/pr0... http://www.worldwinner.com/games/v4... http://www.shockwave.com/content/di... http://www.sidestep.com/get/k42037/... http://go.divx.com/plugin/DivXBrows...
--
The reason it says it is unable to get the Internet Explorer version is because I uninstalled Internet Explorer (attempting to stop the flow of pop-ups - didn't work).
As said, my fixes didn't work anyway because all the corrupt files that I removed just apeared right back. I also can't end certain unwanted processes because my Task Manager has been disabled by one of these bits of malware.
Become one with your computer.
Report Offensive Follow Up For Removal
Response Number 5
Name: LinZ Date: May 4, 2008 at 12:03:52 PacificSubject: Spyware remedies?
Reply: (edit )I have recently run a program called SuperAntiSpyware, but I ended up receiving the blue screen of death when about 6000 of my 170,000 files got scanned. This program found a lot of infections I have not seen on my other programs, but I have no idea why it shuts my computer down when it reaches that number of files.Become one with your computer.
Report Offensive Follow Up For Removal
Response Number 6
Name: brokencrow Date: May 4, 2008 at 13:04:59 PacificSubject: Spyware remedies?
Reply: (edit )You've got a lot of BHO's in that log. Any HJT entry that says (file missing) is safe to delete.How many firewalls you have on that PC? Looks like Norton's on there, ZoneAlarm, too. What do you have McAfee on there for too? One firewall is all you need; no more. Same for anti-virus. And you've got AVG, too??
AntiSpyware's a decent app in my experience. You've got too much security software on that PC.
Try an online scan like Trendmicro or Panda for any remaining viruses or spyware.
A quick rule of thumb: one AV app and one firewall. Anti-spyware, one running 'live' on startup or as a service (in the background), any amount on demand. Anything more than that is overkill and can create the kinds of problems you're having.
www.computerselfdefense.com
Report Offensive Follow Up For Removal
Response Number 7
Name: LinZ Date: May 4, 2008 at 13:32:36 PacificSubject: Spyware remedies?
Reply: (edit )Yes, I do have both Norton and McAfee. However, Norton has expired and McAfee has yet to detect corrupt files (every scan I've done with it has found no infections).I have since uninstalled ZoneAlarm, Panda, Avast!, SpywareBlaster and SpywareDoctor because they showed no infections when I know there are. I'm not sure if Norton is serving its purpose entirely - Norton AntiVirus no longer works, but I think the firewall is fine. I'll get ridof McAfee since it's pretty much worthless. I should probably remove SuperAntiSpyware too since it seems to be unable to finish a system scan.
Thanks, though - I seriously did not know I could have too much security on my computer. I'll see if clearing out some of this software will make any difference.
Become one with your computer.
Report Offensive Follow Up For Removal
Response Number 8
Name: Adii Date: May 4, 2008 at 22:35:42 PacificSubject: Spyware remedies?
Reply: (edit )Hi,Please Disable all real time monitoring programs like Antiviruses and Antispyware and Firewalls to avoid conflicts, you can enable them later. Click here to see how to Disalbe: http://spywaredetail.com/forum/show...
NEXT:
Please download Malwarebytes' Anti-Malware to your desktop. This is an Free Antimalware Application tool.
Download link: http://www.malwarebytes.org/mbam/pr...
>DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
Post its Log in your next reply.
NEXT:
Please download SDFix by AndyManchesta and save it to your desktop.
Download: http://downloads.andymanchesta.com/...
When using this tool, you must use the use the Administrator's account or an account with "Administrative rights"
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
Open the SDFix folder and double click RunThis.bat to start the script.
Copy and paste the contents of the results file Report.txt in your next reply.
• If the Command Prompt window flashes on then off again on XP or Win 2000, please go to Start Menu > Run > then copy and paste the following line:
• If SDFix still does not run check the %comspec% variable. Right click My Computer > click Properties > Advanced > Environment Variables and check that the ComSpec variable points to cmd.exe.
Post all above logs along with Fresh Hijackthis Log.
*Do Safe Computing*
Report Offensive Follow Up For Removal
Use following form to reply to current message:
Version Tracker Pro
Driver Agent