Fark_Maniac
2[H]4U
- Joined
- Feb 21, 2002
- Messages
- 2,438
Okay, only rule to the thread is no questions for getting help. The idea of this is to provide information and links to everyone so we all can make educated decisions on how to remove spyware that is getting more and more prevelant.
Spybot Search and Destroy 1.3 Final
With the release of 1.3, there are two new features that will start to help you cut of Spyware before it starts...though some do slip through. TeaTimer is a new feature that will prompt the user to allow or disallow any registry changes. A bit on the annoying side, but worth the effort. ResidentIE is a feature that will block some tracking cookies. Double Click and Avenue A are some of the most prevelent on the net.
Information | Download
Adaware SE
Adaware has been around for a while and has done a good job. This should be one that is always installed on a machine. Update it often for best results.
Update - There has been a new release of Adaware. The Second Edition (SE) is now supposed to scan better and faster. If you still have version 6, uninstall and re-install SE.
Information | Download
HiJackThis!
HiJackThis is a new software that shows you exactly what is running currently. This program will not scan all files and registries... It creates a log file that one can analyze later and can post online for others to review.
Information | Download
CWShredder
This is another small application written by merijn, however it does one thing that Spybot and Adaware does not. It will kill off CoolWebSearch. However...
NAI/McAffee Virus Scan 7.0/7.1
I doubt that many have this, however I get this through my university for free...other versions or brands may work similarly. However, VScan 7.0/7.1 will find trojans, dialers, spyware, etc...and again, will find some that Spybot and Adaware do not find. Just another program to utilize. Do not count virus scanners out of the picture of spyware hunting.
NAI Information | NAI Virus Scan Updates
Okay, so now that we've covered some programs that *should* get the job done...here are some websites that if you are still stumped...you can go to for advanced help.
Google Search
Yeah, yeah...everyone says to google to get an answer. Problem is, people don't always know what to search for. Recently I saw a thread where they were asking about something like ' res://krappy.dll/index.html#9667 ' or something to that effect. On a google search of the whole thing, you'll get nothing. On a search for ' krappy.dll ' you'll also get nothing. However, if you search for the ' index.html#9667 ' (or whatever the number is)...bingo! You'll get multiple hits with links with different .dll files in there. Put 2 and 2 together and I'm willing to bet that it is the same piece of spyware/malware. The tip here is: Don't just search for the whole thing...search for parts of it that may yield more results!
For the lazy
ComputerCops.biz
This is a recent site I found that generally comes up in google searches aobut spyware. Upon further looking into this site, I've found it to be chocked full of good reading. Mainly the good hard information comes from the forums. While they deal with all sorts of computer security, since I'm talking about spyware...they have a whole sub-forum dedicated just for such things. The only thing I wish not to see is a bunch of us [H]'ers is going over there and just posting HiJackThis logs wishing to be spoon fed resolutions. The best way to educate yourself is to go through the removal process on your own and realize what you are doing when you do it.
ComputerCops Homepage | ComputerCops General Forums | ComputerCops Spyware Forum
Spybot Search and Destroy 1.3 Final
With the release of 1.3, there are two new features that will start to help you cut of Spyware before it starts...though some do slip through. TeaTimer is a new feature that will prompt the user to allow or disallow any registry changes. A bit on the annoying side, but worth the effort. ResidentIE is a feature that will block some tracking cookies. Double Click and Avenue A are some of the most prevelent on the net.
Information | Download
Adaware SE
Adaware has been around for a while and has done a good job. This should be one that is always installed on a machine. Update it often for best results.
Update - There has been a new release of Adaware. The Second Edition (SE) is now supposed to scan better and faster. If you still have version 6, uninstall and re-install SE.
Information | Download
HiJackThis!
HiJackThis is a new software that shows you exactly what is running currently. This program will not scan all files and registries... It creates a log file that one can analyze later and can post online for others to review.
Information | Download
CWShredder
This is another small application written by merijn, however it does one thing that Spybot and Adaware does not. It will kill off CoolWebSearch. However...
Information | Downloadsmerijn said:There is a variant of the Coolwebsearch trojan spreading that closes several anti-spyware apps when you try to open them.
If this is happening to you, download PepiMK's CoolWWWSearch.SmartKiller removal tool first and run it. After it does its job, CWShredder and HijackThis will run properly (as well Spybot S&D, Ad-aware and several anti-spyware forums).
Sent via PM
Hi there, I do computer tech work, and recently I found a variant of CWS that (most likely) uses a variant of the sony root kit tech and is impossible to remove with Adaware, Spybot and CWSshredder
The only program I could find that would find and identify the files and hidden dll, for clening and delete was this:
http://www.f-secure.com/blacklight/
Tyler
NAI/McAffee Virus Scan 7.0/7.1
I doubt that many have this, however I get this through my university for free...other versions or brands may work similarly. However, VScan 7.0/7.1 will find trojans, dialers, spyware, etc...and again, will find some that Spybot and Adaware do not find. Just another program to utilize. Do not count virus scanners out of the picture of spyware hunting.
NAI Information | NAI Virus Scan Updates
Okay, so now that we've covered some programs that *should* get the job done...here are some websites that if you are still stumped...you can go to for advanced help.
Google Search
Yeah, yeah...everyone says to google to get an answer. Problem is, people don't always know what to search for. Recently I saw a thread where they were asking about something like ' res://krappy.dll/index.html#9667 ' or something to that effect. On a google search of the whole thing, you'll get nothing. On a search for ' krappy.dll ' you'll also get nothing. However, if you search for the ' index.html#9667 ' (or whatever the number is)...bingo! You'll get multiple hits with links with different .dll files in there. Put 2 and 2 together and I'm willing to bet that it is the same piece of spyware/malware. The tip here is: Don't just search for the whole thing...search for parts of it that may yield more results!
For the lazy
ComputerCops.biz
This is a recent site I found that generally comes up in google searches aobut spyware. Upon further looking into this site, I've found it to be chocked full of good reading. Mainly the good hard information comes from the forums. While they deal with all sorts of computer security, since I'm talking about spyware...they have a whole sub-forum dedicated just for such things. The only thing I wish not to see is a bunch of us [H]'ers is going over there and just posting HiJackThis logs wishing to be spoon fed resolutions. The best way to educate yourself is to go through the removal process on your own and realize what you are doing when you do it.
ComputerCops Homepage | ComputerCops General Forums | ComputerCops Spyware Forum