I Need Help With Spyware! I Have It Bad!

Vato Loco · 12-30-2004, 08:34 AM

I am so sick of this crap, first thing that comes up on my desktop are a few new icons which I cannot delete or move and the same goes into my favourites folder. I have a new search bar, top and bottom now. I have tried everything I could and it seems nothing works at all. The blue tool bar I had for about a month now and didn't really care because I could just close it but now all the other crap is unremovable. Also have tons of pop-ups, I have microsofts's pop-up blocker and panicware's pop up blocker. :S On top of that, my computer is so slow, I have 512mb ram. :S Explain that....

I even looked up my old thread about this and tried everything there and nothing worked. Please I need your help guys, I don't want any of this crap on my computer at all! I'm so sick of it that I don't want to go on my computer no more....

Would uninstalling microsoft's internet explorer get rid of this crap? If so, what other web browsers are there?

This ad is not displayed to registered members.
Register your free account today and become a member on Yotatech!

roger · 12-30-2004, 09:35 AM

Try Firefox or Opera (what I use). Most spyware is written for Internet Exploder.

I just read an article about this. Your only remaining option may be to napalm the rain forest. That is, wipe your hard drive clean and reinstall your operating system. Make a backup!

EDGE · 12-30-2004, 10:10 AM

You don't want to reinstall your system, your surfing habits will not change and they will come right back.

The worst thing for your computer is downloading videos, and going to any websites with popups.

Get ad-aware or noadware, something that you can run everyday and deletes all the popups/cookies that attach themselves as you surf the internet, most have a 30day free trial, once I installed them all that stuff that makes it's own settings vanished.

lee · 12-30-2004, 10:13 AM

I just did battle with spyware for the 5th time and i FINALLY got it off my puter.

you need a lot of patience, but this is how its done:

1) close all windows -- internet explorer, windows folders, etc
2) get adaware (latest version, i think its 6.0), and a program called hijack this (google it)
3) install HJT in a folder you create in C:
4) run adaware, delete all it finds
5) Run HJT. save the log and post it here: http://www.techsupportforum.com/forumdisplay.php?f=50

those guys are experts and will tell you what to remove.

if after you remove what they say, you still have adware, run it again, see whats repeating.

HJT should give you the file extension & location.. go to that folder and try to manually delete it. if its 'being used' by another program, then:

hit Alt+Ctrl+Delete and open up task manager. look at the 'processes' tab, and find the .exe(s) for that annoying program that are running. end those processes but make sure you select "end process tree". that will end all associated processes that arent allowing it to close. then quickly delete the file.

6) start > run >"regedit"
7) click on hkey_local_machine, open software... look there for any folders labeled by the adware's name. open microsoft, look there as well. you can also use the regedit search feature.
8) int he windows folder, open internet explorer, then toolbar.. see if you can delete anything there.

be careful as you delete that you only remove things that are obviously adware.

i tried to be clear, but if i wasnt or if i said too much, let me know if you have questions.

**** NOTE: DO NOT DELETE ALL THAT HJT FINDS! it will pull up vital files that you SHOULD NOT DELETE. make sure you know what youre deleting before deleting it!

lee · 12-30-2004, 10:15 AM

Quote:

Originally Posted by EDGE

The worst thing for your computer is downloading videos, and going to any websites with popups.

it isnt videos or sites with popups at all.. its sites that install things, or game programs, or other executable files that hurt you.

a lot of times, someone will download a program for, lets say, viewing pics in a slideshow or something. bundled with the install was GATOR ADVERTISING SOFTWARE which will invade your system without you knowing it!

lee · 12-30-2004, 10:18 AM

also, a lot of the time you can delete whole directories of spyware in C:\program files\

EDGE · 12-30-2004, 10:23 AM

Quote:

Originally Posted by lee

it isnt videos or sites with popups at all.. its sites that install things, or game programs, or other executable files that hurt you.

a lot of times, someone will download a program for, lets say, viewing pics in a slideshow or something. bundled with the install was GATOR ADVERTISING SOFTWARE which will invade your system without you knowing it!

your right but you don't know it's their until it's downloaded and you computer starts acting differently

PoBoy · 12-30-2004, 10:28 AM

Reboot PC - constantly hit F8 untill you get the Microsoft Windows Boot Options...select Safemode.

Download latest versions of Adaware SE (newest version rocks!) and AVG virus protection. Run both still in safe mode. Reboot and go back to normal mode.

***midiwall*** · 12-30-2004, 10:48 AM

PoBoy's got the best idea...

One of the nastiest implementations of spyware that I've seen are those that will come back on their own after you delete them. This happens because there are a LOT of nooks and crannies that an app can hide in, and it'll regenerate it's hooks at various points during boot, starting an app, etc. Walking through the regisitry manually will get them, but you have to know what you're looking for, and what _not_ to delete.

This is the link to AdAware's download:
http://www.lavasoftusa.com/software/adaware/

Oh, and Firefox rocks. Get it here.

SoCal4Running · 12-30-2004, 10:54 AM

NoAddware and Spybot Search and Destroy; run both once a day and you will have no problems. Tune-up Utilities is another great program to make your PC more efficient also.

lee · 12-30-2004, 11:03 AM

poboy's will work if you only have a few superficial ones.

there are others that literally imbed themselves into windows and its applications.. for those, you need my system.

lee · 12-30-2004, 11:05 AM

Quote:

Originally Posted by midiwall

One of the nastiest implementations of spyware that I've seen are those that will come back on their own after you delete them. This happens because there are a LOT of nooks and crannies that an app can hide in, and it'll regenerate it's hooks at various points during boot, starting an app, etc. Walking through the regisitry manually will get them, but you have to know what you're looking for, and what _not_ to delete.

YUP.

happened to me. there were 14 parts to this spyprogram in a folder in program files... so i deleted them, and 1 stayed behind because it was 'being used by another program'. that 1 left behind reinstalled the 13 others before my eyes!

***midiwall*** · 12-30-2004, 11:27 AM

Hey VL, whatever happend to Chris's solution that worked for you before?

I still don't like it, but you seemed to have good luck with it back in March.

***Corey*** · 12-30-2004, 02:14 PM

I run SpySweeper, an app you must ante up a few coins for, but it is worth it.
I have it set to block bad sites and cookies.

I run it once a week on Thursday during my normal PC weekly tuneup.
It reports no problems found, as it gets the stuff in the background and kills it before it can attack me.

It is a great app, and you might Google it too and see if they have a trial version.

I also use Spybot, and use the immunize thing which blocks bad crap too.
But there is a bug in the latest version of Spybot which tells you have a DSO Exploit and you remove it, and it comes right back.
There really is no DSO thing on my PC, and this should be cleared up in the next release.

But yeah, I never get spyware on my rig running these apps and AVG.
Seeing that screen of yours, I feel your pain.
That is frickin' sad, and makes me wanna rip out the heart and feed it beating to these people who make spyware.

kronicx · 12-30-2004, 05:45 PM

Are you tired of all the crap that gets put on your computer while surfing online? Do you want to be done with spyware for good? Then get the Spyware Eliminator

Bighead · 12-30-2004, 06:01 PM

SchadenTech Malware Guide

Has good guidance on how to get rid of any spy/adware you might have and how to keep from getting it in the future.

***Corey*** · 12-30-2004, 06:02 PM

Cool, I wonder how it works with XP

PS...
I just updated to release 3.5 of Spy Sweeper just now, and this was in the headlines in the interface.
They have a "news" feature within the ap that updates you with the latest news.

Quote:

As new spyware threats emerge, the Webroot Threat Research Team identifies and adds these threats to the Spy Sweeper database for continued protection. We've highlighted some of the more pervasive threats below.

Tagged for their prevalence on computers and their insidious nature, the ten most unwanted programs that install on your computer without your knowledge include:

Gator (a.k.a. GAIN) - bundled with the popular Kazaa file sharing software, Gator deploys banner ads based on your surfing habits.
PurityScan - pop-up ads that trick users into installing programs with a claim they find and delete porn on their PC.
CoolWebSearch - hijacks searches, browser home pages, and Internet Explorer settings.
Perfect Keylogger - records all sites users visit, their keystrokes and mouse clicks to get users’ private information (passwords, account numbers)
n-CASE - a form of adware.
KeenValue - a form of adware.
TIBS Dialer - reconnects modems to toll numbers and pornography pay-by-the-minute phone sites.
Transponder - spyware posing as browser assistants.
ISTbar/AUpdate - spyware posing as browser assistants.
Internet Optimizer - hijacks Web errors and redirects to its own site
Spy Sweeper software protects against all these top threats.

Tips and Tricks:
Spy Sweeper uses "Definition" files to detect and remove spyware from your PC. To ensure comprehensive protection, we recommend subscribers update their definitions at least once a week. Non-subscribers receive one free update. To check for new "Definition" files, click the Options icon to find the Update Definitions button under the Program Options panel.

Some of the above are pretty dang nasty 'eh?

calrockx · 12-30-2004, 06:29 PM

i'll just tell you what worked for me:

format pc. reinstall only what you need. use firefox browser. use trend micro pc-cillian antivirus/adware program. be careful about what you click and where you go.

Vato Loco · 12-31-2004, 06:18 PM

epic37311 · 12-31-2004, 06:38 PM

I downloaded yahoo messanger bar it has a free Anti-Spy and It is very easy to use. I would get pop-ups from yota tech. it was real bad. just any time i refreshed my screen something would pop up. It worked for me. It may not for you but its my 2cents.worth a shot and its free. Alot of my pop ups where from Ad-Serve and 180 marketing.

***Corey*** · 12-31-2004, 06:52 PM

You are not getting pop ups from here.
This has been brought up before, and we do not use pop ups here.

This is a pop up free zone.

Fred, your PC looks much better.

***midiwall*** · 12-31-2004, 06:55 PM

So VL... you're clean now? What worked for youo this time?

epic37311 · 12-31-2004, 07:02 PM

Quote:

Originally Posted by Corey

You are not getting pop ups from here.
This has been brought up before, and we do not use pop ups here.

This is a pop up free zone.

Fred, your PC looks much better.

Yeah i was just saying my computer would do a pop up just refreshing not even going to another site it was horrible. When you get alot of that crap off your computer it makes you think its a new one.

***Corey*** · 12-31-2004, 07:44 PM

I have never had spyware on the PC before, but after seeing and reading all the stories here and seeing the new threats on the Spy Sweeper news page, that makes me want to tie these guy's between two Toyotas with winches and go at it.

Dang, that was a looooooooooooooooooong sentence.

epic37311 · 12-31-2004, 07:47 PM

Shouldnt that be illegal. If Spam is couldnt that be also.

12-30-2004, 09:35 AM	#2 (permalink)
roger Registered User Join Date: Jun 2004 Location: Austin, TX Posts: 473	Try Firefox or Opera (what I use). Most spyware is written for Internet Exploder. I just read an article about this. Your only remaining option may be to napalm the rain forest. That is, wipe your hard drive clean and reinstall your operating system. Make a backup! __________________ Looks like I picked the wrong week to stop sniffing glue.

12-30-2004, 10:10 AM	#3 (permalink)
EDGE Registered User Join Date: Jan 2003 Location: outside NYC Posts: 2,038	You don't want to reinstall your system, your surfing habits will not change and they will come right back. The worst thing for your computer is downloading videos, and going to any websites with popups. Get ad-aware or noadware, something that you can run everyday and deletes all the popups/cookies that attach themselves as you surf the internet, most have a 30day free trial, once I installed them all that stuff that makes it's own settings vanished. __________________ 2003 ES300 2003 V8 LTD 4Runner 2006 Nissan Maxima SE

12-30-2004, 10:13 AM	#4 (permalink)
lee Contributing Member Join Date: Dec 2003 Location: boston, ma Posts: 6,756	I just did battle with spyware for the 5th time and i FINALLY got it off my puter. you need a lot of patience, but this is how its done: 1) close all windows -- internet explorer, windows folders, etc 2) get adaware (latest version, i think its 6.0), and a program called hijack this (google it) 3) install HJT in a folder you create in C: 4) run adaware, delete all it finds 5) Run HJT. save the log and post it here: http://www.techsupportforum.com/forumdisplay.php?f=50 those guys are experts and will tell you what to remove. if after you remove what they say, you still have adware, run it again, see whats repeating. HJT should give you the file extension & location.. go to that folder and try to manually delete it. if its 'being used' by another program, then: hit Alt+Ctrl+Delete and open up task manager. look at the 'processes' tab, and find the .exe(s) for that annoying program that are running. end those processes but make sure you select "end process tree". that will end all associated processes that arent allowing it to close. then quickly delete the file. 6) start > run >"regedit" 7) click on hkey_local_machine, open software... look there for any folders labeled by the adware's name. open microsoft, look there as well. you can also use the regedit search feature. 8) int he windows folder, open internet explorer, then toolbar.. see if you can delete anything there. be careful as you delete that you only remove things that are obviously adware. i tried to be clear, but if i wasnt or if i said too much, let me know if you have questions. **** NOTE: DO NOT DELETE ALL THAT HJT FINDS! it will pull up vital files that you SHOULD NOT DELETE. make sure you know what youre deleting before deleting it! Last edited by lee; 12-30-2004 at 10:17 AM.

12-30-2004, 10:28 AM	#8 (permalink)
PoBoy Contributing Member Join Date: Dec 2002 Location: Phoenix, AZ Posts: 2,000	Reboot PC - constantly hit F8 untill you get the Microsoft Windows Boot Options...select Safemode. Download latest versions of Adaware SE (newest version rocks!) and AVG virus protection. Run both still in safe mode. Reboot and go back to normal mode. __________________ So I sold my '96 4Runner to get married...I was sad. BUT NOT ANY MORE! Check out my 1985 4Runner with 32,xxx miles! PoBoyTech.Net

12-30-2004, 10:48 AM	#9 (permalink)
*midiwall* Sponsoring Member Join Date: Dec 2002 Location: Seattleish, WA Posts: 9,078	PoBoy's got the best idea... One of the nastiest implementations of spyware that I've seen are those that will come back on their own after you delete them. This happens because there are a LOT of nooks and crannies that an app can hide in, and it'll regenerate it's hooks at various points during boot, starting an app, etc. Walking through the regisitry manually will get them, but you have to know what you're looking for, and what _not_ to delete. This is the link to AdAware's download: http://www.lavasoftusa.com/software/adaware/ Oh, and Firefox rocks. Get it here. __________________ ~ Mark '96 4Runner Limited S/C MI - 370cc injectors, Air! horns, Airaid MIT, ATS A-arms, 285/75/R16 BFG MTs, Bored TB, Brembo slotted, Cobra 75 WXST, Deckplate, Downey headers, Hayden cooler, IPT valve body, Level 10 torque convertor, Meanstreak exhaust, OME/OME rears, On-board PC (XM, Nav, WiFi, etc), Port 'n Polish, Remote Start, SAW fronts, Hilux console, SMT-5, Stubb's sliders, Supra MAF, TJM-17, 2.0" pulley, Viair 450c, Walbro 190, Weasy2k cams Last edited by midiwall; 12-30-2004 at 10:51 AM.

12-30-2004, 10:18 AM	#6 (permalink)
lee Contributing Member Join Date: Dec 2003 Location: boston, ma Posts: 6,756	also, a lot of the time you can delete whole directories of spyware in C:\program files\

12-30-2004, 10:54 AM	#10 (permalink)
SoCal4Running Registered User Join Date: Mar 2004 Location: Oceanside, CA. Posts: 786	NoAddware and Spybot Search and Destroy; run both once a day and you will have no problems. Tune-up Utilities is another great program to make your PC more efficient also. __________________ '86 4runner 22RE, 5-speed, LC Street EFI head w/ cam, LC Pistons, ARP Head Studs, Downey header, Dynomax 2 1/4" full exhaust, VDO water temp guage, 01-03 Tacoma cd\tape radio with 10" Bazzoka, Downey 2" rear springs, GDI radiator, Torus fan DONE!!!! '68 Ford Mustang Fastback Daily driver with a built 289 and a streetfighter trans.(Retired) 98 Subaru Outback-Took over daily driving duties MicroMatic.com Waco93.com

12-30-2004, 11:03 AM	#11 (permalink)
lee Contributing Member Join Date: Dec 2003 Location: boston, ma Posts: 6,756	poboy's will work if you only have a few superficial ones. there are others that literally imbed themselves into windows and its applications.. for those, you need my system.

12-30-2004, 11:27 AM	#13 (permalink)
*midiwall* Sponsoring Member Join Date: Dec 2002 Location: Seattleish, WA Posts: 9,078	Hey VL, whatever happend to Chris's solution that worked for you before? I still don't like it, but you seemed to have good luck with it back in March. __________________ ~ Mark '96 4Runner Limited S/C MI - 370cc injectors, Air! horns, Airaid MIT, ATS A-arms, 285/75/R16 BFG MTs, Bored TB, Brembo slotted, Cobra 75 WXST, Deckplate, Downey headers, Hayden cooler, IPT valve body, Level 10 torque convertor, Meanstreak exhaust, OME/OME rears, On-board PC (XM, Nav, WiFi, etc), Port 'n Polish, Remote Start, SAW fronts, Hilux console, SMT-5, Stubb's sliders, Supra MAF, TJM-17, 2.0" pulley, Viair 450c, Walbro 190, Weasy2k cams

12-30-2004, 02:14 PM	#14 (permalink)
*Corey* Co-Founder/Administrator Staff Join Date: May 2002 Location: Auburn, Washington Posts: 26,071	I run SpySweeper, an app you must ante up a few coins for, but it is worth it. I have it set to block bad sites and cookies. I run it once a week on Thursday during my normal PC weekly tuneup. It reports no problems found, as it gets the stuff in the background and kills it before it can attack me. It is a great app, and you might Google it too and see if they have a trial version. I also use Spybot, and use the immunize thing which blocks bad crap too. But there is a bug in the latest version of Spybot which tells you have a DSO Exploit and you remove it, and it comes right back. There really is no DSO thing on my PC, and this should be cleared up in the next release. But yeah, I never get spyware on my rig running these apps and AVG. Seeing that screen of yours, I feel your pain. That is frickin' sad, and makes me wanna rip out the heart and feed it beating to these people who make spyware. __________________ Corey 2007 FJ Cruiser Built for 4wheelin', expedition, camping, and overlanding use PNW FJ Cruisers ☺ Detailing 101 ☺ Join Topsites ☺ Muffler Comparisons ☺ Maggiolinas In The Wild FJ Cruiser Buildup ☺ New Roof Top Tent ☺ Video Of My Penthouse Part II ☺ Rehinge Your ARB/Engel Fridge Blog About Roof Top Tents ☺ FJC Magazines Online Review Of My Tent ☺ 2009 Specialized Rockhopper Pro

12-30-2004, 05:45 PM	#15 (permalink)
kronicx Registered User Join Date: Feb 2003 Location: CA Posts: 484	Are you tired of all the crap that gets put on your computer while surfing online? Do you want to be done with spyware for good? Then get the Spyware Eliminator __________________ Matt 2003 V8 Titanium Limited 4x4 X-REAS

12-30-2004, 06:01 PM	#16 (permalink)
Bighead Contributing Member Join Date: Jul 2002 Location: Colorado Posts: 1,340	SchadenTech Malware Guide Has good guidance on how to get rid of any spy/adware you might have and how to keep from getting it in the future. __________________ Lance 2001 4Runner Limited 4X4 -- 315/75R16 MT/Rs \| MT Classic IIs \| Dual ARBs/4.88s \| (F) 5125/Tundra Coils (R) 5125/LC Coils \| 4Crawler 1.5" BL \| Aisin Manual Hubs \| Slee Sliders \| Sonoran Steel Rear Bumper \| TJM T-15 w/ Warn M8000 2004 Land Cruiser -- OME Medium Lift \| Nitto Terra Grapplers

12-30-2004, 06:29 PM	#18 (permalink)
calrockx Contributing Member Join Date: Sep 2002 Location: Santa Clarita, California Posts: 4,742	i'll just tell you what worked for me: format pc. reinstall only what you need. use firefox browser. use trend micro pc-cillian antivirus/adware program. be careful about what you click and where you go. __________________ [2002 4Runner 4WD]

12-31-2004, 06:18 PM	#19 (permalink)
Vato Loco Registered User Join Date: May 2002 Posts: 3,482	__________________ 2005 Toyota Tacoma Access-Cab 4x4 w/ TRD Off-Road Package 33" Goodyear MTR's 3" Toytec Lift Clear Headlights Quick Pic of the Taco My Old Toyota 4Runner Limited, Check It Out!

12-31-2004, 06:38 PM	#20 (permalink)
epic37311 Contributing Member Join Date: Oct 2004 Location: Decatur TN Posts: 969	I downloaded yahoo messanger bar it has a free Anti-Spy and It is very easy to use. I would get pop-ups from yota tech. it was real bad. just any time i refreshed my screen something would pop up. It worked for me. It may not for you but its my 2cents.worth a shot and its free. Alot of my pop ups where from Ad-Serve and 180 marketing. Last edited by epic37311; 12-31-2004 at 06:40 PM. Reason: more accurat description

12-31-2004, 06:52 PM	#21 (permalink)
*Corey* Co-Founder/Administrator Staff Join Date: May 2002 Location: Auburn, Washington Posts: 26,071	You are not getting pop ups from here. This has been brought up before, and we do not use pop ups here. This is a pop up free zone. Fred, your PC looks much better. __________________ Corey 2007 FJ Cruiser Built for 4wheelin', expedition, camping, and overlanding use PNW FJ Cruisers ☺ Detailing 101 ☺ Join Topsites ☺ Muffler Comparisons ☺ Maggiolinas In The Wild FJ Cruiser Buildup ☺ New Roof Top Tent ☺ Video Of My Penthouse Part II ☺ Rehinge Your ARB/Engel Fridge Blog About Roof Top Tents ☺ FJC Magazines Online Review Of My Tent ☺ 2009 Specialized Rockhopper Pro

12-31-2004, 06:55 PM	#22 (permalink)
*midiwall* Sponsoring Member Join Date: Dec 2002 Location: Seattleish, WA Posts: 9,078	So VL... you're clean now? What worked for youo this time? __________________ ~ Mark '96 4Runner Limited S/C MI - 370cc injectors, Air! horns, Airaid MIT, ATS A-arms, 285/75/R16 BFG MTs, Bored TB, Brembo slotted, Cobra 75 WXST, Deckplate, Downey headers, Hayden cooler, IPT valve body, Level 10 torque convertor, Meanstreak exhaust, OME/OME rears, On-board PC (XM, Nav, WiFi, etc), Port 'n Polish, Remote Start, SAW fronts, Hilux console, SMT-5, Stubb's sliders, Supra MAF, TJM-17, 2.0" pulley, Viair 450c, Walbro 190, Weasy2k cams

12-31-2004, 07:44 PM	#24 (permalink)
*Corey* Co-Founder/Administrator Staff Join Date: May 2002 Location: Auburn, Washington Posts: 26,071	I have never had spyware on the PC before, but after seeing and reading all the stories here and seeing the new threats on the Spy Sweeper news page, that makes me want to tie these guy's between two Toyotas with winches and go at it. Dang, that was a looooooooooooooooooong sentence. __________________ Corey 2007 FJ Cruiser Built for 4wheelin', expedition, camping, and overlanding use PNW FJ Cruisers ☺ Detailing 101 ☺ Join Topsites ☺ Muffler Comparisons ☺ Maggiolinas In The Wild FJ Cruiser Buildup ☺ New Roof Top Tent ☺ Video Of My Penthouse Part II ☺ Rehinge Your ARB/Engel Fridge Blog About Roof Top Tents ☺ FJC Magazines Online Review Of My Tent ☺ 2009 Specialized Rockhopper Pro

12-31-2004, 07:47 PM	#25 (permalink)
epic37311 Contributing Member Join Date: Oct 2004 Location: Decatur TN Posts: 969	Shouldnt that be illegal. If Spam is couldnt that be also.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
spyware	Memphis_Yota	Computer Talk	19	03-17-2005 06:56 PM
Hijacking spyware	Tacoma Dude	Computer Talk	18	02-17-2005 03:12 PM
Do Certificates allow spyware?	BT17R	Computer Talk	4	11-04-2004 06:02 AM
Spyware!!!!	FUGGRWE	Computer Talk	22	07-26-2004 07:43 PM
Spyware Shootout	BT17R	Off Topic Talk	0	02-19-2004 06:04 PM