Re: Spyware...help!!!

From: PA Bear (PABear_at_mvps.org)
Date: 06/17/04 

Date: Thu, 17 Jun 2004 03:05:50 -0400

I wouldn't trust anyone but a spyware expert to get rid of the stuff.
Usually there are no such experts around to whom you can take the machine.

> I have done all the things that were mentioned over and
> over again...

No, you haven't: You've not run HijackThis and posted your log to an
appropriate forum (which is where the experts are). With most new hijacker
variants, this is the only way to go. **There is no quick fix.** 

-- 
HTH - Please Reply to This Thread
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP
AumHa Forums
http://forum.aumha.org
What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx
kathy wrote:
> This is horrid!  I can't believe that I am unable to rid
> myself of this!
>
> If I take it in to someone, what are the chances they
> would be able to get rid of it for me?  I am afraid of
> running my system with this on it for even this long but
> don't know what to do.
>
> I have done all the things that were mentioned over and
> over again, but I can't keep it gone no matter what.  It
> doesn't make sense that no one has a tool out there to
> get rid of it.
>
> Am I endangering others by emailing them, or is it okay
> to do from my system?
>
> Kathy
>
>
>> -----Original Message-----
>> <quote>
>> When all else fails, HijackThis
>>
> (http://www.spywareinfo.com/~merijn/files/HijackThis.exe)
> is the preferred
>> tool to use.  It will help you to both identify and remove any
>> hijackware/spyware.  **Post your files to
> http://forums.spywareinfo.com/ or
>> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
>> here.** </quote>
>>
>> Recent Look2Me variants are quite tricky and currently no anti-malware
>> tool can remove it completely.  Hence, it requires an examination of your
>> HijackThis logs by an expert for be able to resolve the problem.
>> --
>> ~PA Bear
>>
>> kathy wrote:
>>> Thanks for the tips!
>>> I did everything you mentioned.
>>> However, that www.look2me site continues to pop up.  I
>>> loaded spyware blaster and that seems to have stopped a
>>> lot, but not the look2me site.  How can I get that to
>>> stop?
>>>
>>> Thanks again!
>>> kathy
>>>
>>>
>>>> -----Original Message-----
>>>> Not only did you waste your money but Spyblocs is BetrayWare: It
>>>> installs spyware!  See http://aumha.org/a/parasite.php#betray
>>>>
>>>> After *uninstalling* Spyblocs, here's how to check your system for
>>>> "hijackware" and prevent further incidents:
>>>>
>>>> Help with Hijackware
>>>> http://aumha.org/a/parasite.htm
>>>>     http://aumha.org/a/quickfix.htm
>>>> http://mvps.org/winhelp2002/unwanted.htm
>>>> http://inetexplorer.mvps.org/Darnit.htm
>>>>
>>>> CoolWebSearch Chronicles
>>>> http://www.spywareinfo.com/~merijn/cwschronicles.html
>>>>
>>>> Run these tools in the following order with nothing else running in
>>>> background:
>>>>
>>>> 1. CWShredder (fix all found)
>>>>
>>>> 2. Ad-Aware (fix all found)
>>>>
>>>> 3. Spybot (RTFM but generally fix everything in red)
>>>>
>>>> Important: You *must* seek updates for Ad-Aware, Spybot, etc., before
>>>> each and every use, even "right out of the box".  But even they can't
>>>> catch everything, 24/7.  When all else fails, HijackThis
>>>>
>>>
> (http://www.spywareinfo.com/~merijn/files/HijackThis.exe)
>>> is the preferred
>>>> tool to use.  It will help you to both identify and remove any
>>>> hijackware/spyware.  **Post your files to
>>> http://forums.spywareinfo.com/ or
>>>> http://forum.aumha.org/viewforum.php?f=30 for expert analysis, not
>>>> here.**
>>>>
>>>> [Alternate download pages for many of the above tools may be found at
>>>> http://aumha.org/a/parasite.htm.]
>>>>
>>>> Also:
>>>>
>>>> 1. Download and run Stinger
>>> (http://vil.nai.com/vil/stinger/); then...
>>>>
>>>> 2. Update your virus definitions, enable Show Hidden Files
>>>>
>>>
> (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
>>> 2002092715262339)
>>>> and then run a full system scan in Safe Mode
>>>>
>>>
> (http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/
>>> 2001052409420406)
>>>> with nothing else running in background.
>>>>
>>>> WinXP Only (WinME similar): If this scan finds anything, create a new
>>>> Restore Point then Disk Cleanup > More options > Delete all but the
>>>> most recent Restore Point.
>>>>
>>>> So How Did I Get Infected Anyway?
>>>> http://boards.cexx.org/viewtopic.php?t=957
>>>> --
>>>> Kathy wrote:
>>>>> How can I stop spyware?  I just bought eblocs spyware
>>>>> software and each time I go offline I run the software
>>>>> and have new spyware on my system.  The one thing that
>>>>> ALWAYS pops up (but now for a mere moment) is something
>>>>> like look2me.com...I installed popupstopper that had
>>>>> helped reduce it, but how can I stop it altogether? Help!
>>>>>
>>>>> I am constantly running Norton anti-virus, ad-aware,
>>>>> spybot, cwshredder, hijack this, and spyblocs.  Each time
>>>>> I am able to get rid of what is on my system, but how can
>>>>> I stop it from attaching to me EACH TIME I go online?

Relevant Pages

  • Re: Spyware...help!!!
    ... "PA Bear" wrote in message ... >I wouldn't trust anyone but a spyware expert to get rid of the stuff. ... > kathy wrote: ... HijackThis ...
    (microsoft.public.windowsxp.general)
  • Re: Hijacked browser
    ... I use the following steps to get rid of spyware and they work for me. ... Download and install the latest version of: ... CWShredder and HijackThis which should be the latest versions). ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Spyware...help!!!
    ... Try the following link to see if it helps get rid of www.look2me ... "kathy" wrote in message ... |>"hijackware" and prevent further incidents: ... |>What You Should Know About Spyware ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware...help!!!
    ... > Kathy ... >> HijackThis logs by an expert for be able to resolve the problem. ... >> ~PA Bear ... installs spyware! ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware...help!!!
    ... "kathy" wrote in message ... >2004 Windows MVP "Winny" Award ... >>I wouldn't trust anyone but a spyware expert to get rid ... When all else fails, HijackThis ...
    (microsoft.public.windowsxp.general)