Tom's Guide | Tom's Hardware | Tom's Games
 |
 |
 |
Hello again,
I have been trying to get rid of spyware put out by marketscore called netsetter, with the help of KZWG, I was able to rid my computer of the visible files. But, IT, still exists. It is in the internet options, connections, automatic configuration area. IT is like a virus, it checks the automatic config box and intalls its web address. It has been eliminated (not entirely), but it still preventing me from getting on the net. It keeps appearing in the connections sector, but not highlighted. I have looked everywhere I think it could be hiding, but can't track it down. Though not highlighted, I can reach my isp to tell me I am logged on, but stops at this point, this virus like spyware is preventing the browser from coming on line. I don't get a response when I ping and the isp reports I have been timed out and disconnects, the modem then reconnects to the isp and the process starts all over again,
I would appreciate any help you can give me to get rid of my headache, I have been told this spyware is a tough one to get rid of and they have proven right,
charlie
You are trying to do it manually? Try using the latest version of Ad-a-ware and the newest reference file for it. It'll clean the files and the registry entries..
0 
Charlie, The link below may be of help getting rid of netsetter completely.
http://www.marioncomputer.com/internet/Help/netsetter.htm
HTH
Tufenuf
0
Thank you SDG and Tufenuf for your help. I have adaware, it does not see this virus like intruder, also tried spybot, it misses this one. I will go to the website Tufenuf suggested, hopefully they might have some answers,
thanks again,
charlie
0
charlie,
Had a gut feeling that you would have to go beyond deleting NScheck in DOS, but, wishful thnking took over.
The link:
[http://www.marioncomputer.com/internet/Help/netsetter.htm] has info that you tried a week or so ago. Try it again if you like, and see how it goes.So far you tried (at least) AdAware, Spybot, the NSCheck uninstall options, the info on the link above, etc. Did you ever try PestPatrol?...longshot.
Next suggestion is some work with the winsock2 key and/or Registry. You will need to do a Registry back up, even though the Registry is crawling with this thing (better than no Registry at all if something does not gel).
Need to get some ducks in a row for this one. Will check a few things out and get back with you, if you want to give another boxing round with Netsetter a whirl.
0 0
Sounds like you've got more than spyware. If it's changing your home page you've got a webpage hijacker. Some of those load in msconfig. Run that and look for sp.dll and sp32.dll in the startup tab. Both are hijackers.
Otherwise, what else is loading in the startup tab?
0
Hello again FZWG,
I tried pest patrol, it also missed netsetter, I downloaded the information from the website that Tufenuf gave me, I will try that next. You were right when you said, this will be a tough cookie to get rid of. It has a life of it own. I do not have a network card. I connect the net with dial up with a 56k modem. I will check for the other two that DAVEINCAPS mentioned, I don't remember seeing them when I ran msconfig, but my mind right now is like silly putty, I will go back and check to see if they are hitch hiking in my computer. Thank you DAVEINCAPS and FZWG (sorry about the KZWG misspelling) for your help now and before,
charlie
0
OK charlie, here it goes:
If it is sp.dll or sp32.dll, let us know. If it is still Netsetter, as you are finding out, this spyware/foistware, may write to the Winsock keys, and there goes your Internet.
The following suggested ‘fix’ requires the use of the W98 first edition or second edition CD, or cab files installed on the hard drive.
Control Panel>Add/Remove Programs>Windows Setup Tab, select: Communications>Details. >>>Make note of all items installedNetwork icon>Configuration tab. >>>Make note of the components installedRun, key in: regedit Click OK. All warnings about backing it up apply!!!!
Delete, or rename the following keys:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Remote Access
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\Winsock
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\Winsock2
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services|VxD\MSTCPAfter all keys are deleted or renamed, RESTART.
Control Panel>Add/Remove Programs>Windows Setup Tab.
Check Communications. Re-check the entries that were previously installed, or at a minimum, check Dial Up Networking (DUN) and Hyperterminal.
Check: Apply.
Do not Restart.
OK out of Add/Remove Programs.Control Panel>Network. Add any components previously installed, or at a minimum: CFMSN, DUA and TCP/IP.
Restart.To this point, just about all the Windows communications and networking components were removed, so that Windows had to install new registry keys. Also, Windows had to install original Operating System version files and components, unmodified by third party software.
If any version conflicts develop, allow Windows to replace possible corrupt files with fresh ones.Extra precaution!!
This procedure does not replace winsock.dll, wsock32.dll, or rasapi32.dll, which may also be corrupted. Check out the version of each of these dll files to either download them from:http://www.drd.dyndns.org/index2.html
or obtain them from the OS CD.
Use System File Checker utility to extract/replace.After all of the above, run MSConfig to make sure there are no traces of the monster.
In Control Panel>Internet Options>Connections tab, make sure there is no proxy Marketscore entry.
Run regedit again, and do a Find for each of the following: Netsetter, NSCheck, Ossproxy, or Marketscore.
You want to make sure ALL of it is GONE!!
By all means, post back.
0
Let's take a look at your current startup configuration to see 'what else' is there.
Download: StartupList from the site below and copy/paste results on this post.
http://www.lurkhere.com/~nicefiles/
0
I found this regarding Netsetter/Marketscore on www.safersite.com/PestInfo/N/NetSetterSpyware.asp+netsetter&hl=da&ie=UTF-8 (I had to use the cached version on Google though...)
Seems to work alright, but you'll never know if it actually removes everything.
---
There is a hidden uninstall feature. Open a command window and enter (for Windows 95/98/Me):"%WinDir%\SYSTEM\NSCheck.exe" /uninstall
Or for Windows NT/2000/XP just:NSCheck /uninstall
---
0
Hello
I have this same problem with the netsetter proxy and I have no internet connection at all anymore on that computer. I was looking at FZWG's post and about midway down it said:"Control Panel>Network. Add any components previously installed, or at a minimum: CFMSN, DUA and TCP/IP.
Restart."How do I reinstall my TCP/IP and what are the other 2 things? I did try to rewrite just the winsock and rasapi32 files as a quick attemp, but that did not work.
I'm hesitant to mess with the registry because I've never done it before. Mainly I'm concerned about putting those files back in afterwards. Also, I have reinstalled Windows right over the previous one about 3 times in the last few days and that did not work either. Should this have fixed the problem by rewriting the registry??? (That was done due to another problem that is now fixed). Thanks for the help and I would greatly appreciate any responses :)
0  |
 website crashes my machin...
|
Windows 98 Registry Probl...
|
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |
