Re: Spyware: how to clean registry and stop returns

From: Jim Macklin (p51mustang[threeX12)
Date: 09/18/04 

Date: Sat, 18 Sep 2004 13:05:51 -0500

It is a good list, but on a computer that is only two weeks
old, it would be easier to reformat and do a clean install,
install those programs, be sure the firewall and anti-virus
are turned on. Then start over clean. 

-- 
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.
"Rock" <rock@comcast.nospam.net> wrote in message 
news:ODwVYlanEHA.3628@TK2MSFTNGP09.phx.gbl...
| Ron wrote:
|
| > Hi, glad you're there for us!
| >
| > I have an almost inoperable PC that's just two weeks 
old.
| > I run WinsXP home, Service pack 1, with I.E Exlorer.
| > The system came with Norton AntVirus 2004 but I failed 
to
| > turn on it's Firewall for the first 2 days.
| > I added Ad-Aware (Personal SE), SpyBot's (Search &
| > Destroy), and Registry Cleaner. The systems detect
| > hundreds of Spyware items, remove many of these 
malicious
| > files, and clean up some of their registry entries.
| > But I'm always always left with enough Spyware and
| > registry changes that they seem to come back in full
| > disabling force when I go online.
| >
| > Question 1:
| >  I realize I need to clean my registry, and it's obvious
| > that the above applications can't do that ENTIRE
| > cleansing, but is their an alternative to using 
"regedit"
| > and manually removing the hundreds of offending registry
| > items Spyware created?
| >
| > Question 2:
| > I just installed "Spybalster 3.2".  It claims to prevent
| > re-entry of Spyware, and even "prevent it from running 
on
| > your system'.  Does that mean I can effectively prevent
| > even the Spyware registry entries from reinstalling or 
re-
| > activating these pests?
| >
| > Thanks,  Ron
|
| You need to run a combination of programs and do so in 
safe mode.
| You'll need to check for spyware/adware as well as 
viruses.
|
| In addition to Adaware and Spybot which you say you have 
(note Adaware
| just released a new version 1.05), run these programs to 
check for
| spyware/malware.  After installing update them, then boot 
into safe mode
| and run them.  You should update and run them weekly.
|
| Cwshredder
| http://aumha.org/freeware/freeware.php#cwshred
|
| Pest Patrol Free Pest Scanner
| http://www.pestscan.com/ScanOrTrial.asp
|
| If you’re still having problems after running these then 
run HijackThis
| and post the log to one of the specialty forums, _NOT_ 
this one.
|
| HijackThis
| http://www.majorgeeks.com/download.php?det=3155
|
| Forums to Interpret HijackThis Logs:
|
| http://www.spywareinfo.com/forums/
| http://forum.aumha.org/viewforum.php?f=30
| http://forums.tomcoyote.org/
| http://www.wilderssecurity.com/
|
| For viruses start with Trend Micro's Sysclean.  After 
downloading the
| program and signature file turn off system restore, boot 
into safe mode
| and run it.  Then boot back into normal mode, turn system 
restore,  and
| do a complete scan with your AV product.  Also do a scan 
with at least
| two of these on line services:
|
| Trend Micro Sysclean
| http://www.trendmicro.com/download/dcs.asp
|
| Trend Micro Signature File
| http://www.trendmicro.com/download/pattern.asp
|
| Online and Downloadable Virus Scanning:
|
| Panda ActiveScan
| 
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
|
| Bit Defender Online Virus Scan:
| http://www.bitdefender.com/scan/license.php
|
| Symantec Online Virus and Security Scan:
| http://security.symantec.com/ssc/home.asp
|
| TrendMicro:
| http://housecall.trendmicro.com/housecall/start_corp.asp
|
| McAfee Online Virus Scan:
| http://www.mcafee.com/myapps/mfs/default.asp
|
| RAV AntiVirus - Scan Online
| http://www.ravantivirus.com/scan/
|
| F-Secure:
| http://support.f-secure.com/enu/home/ols.shtml
|
| After your system is clean use these programs to help keep 
it clean:
|
| Spywareblaster
| www.javacoolsoftware.com/sbdownload.html
|
| Spywareguard
| http://www.javacoolsoftware.com/sgdownload.html
|
| IE-SPYAD
| http://www.staff.uiuc.edu/~ehowes/resource.htm
|

Relevant Pages

  • Re: Spyware: how to clean registry and stop returns
    ... | dedicated side of mwe wants to try to clean up the little | Spyware demons and liberate my machine. ... Is that firewall the same as | the one called "Internet Connection Firewall"?? ... |>| Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware: how to clean registry and stop returns
    ... > hundreds of Spyware items, ... and clean up some of their registry entries. ... You need to run a combination of programs and do so in safe mode. ... Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Rundll32.dll - Finding who the parent app is?
    ... > Check your system for malware and viruses using Spybot, Adaware, ... Bazooka Spyware Scanner and HiJackThis. ... If your system is clean then do some clean boot ... > Bit Defender Online Virus Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Rundll32.dll - Finding who the parent app is?
    ... Bazooka Spyware Scanner and HiJackThis. ... If your system is clean then do some clean boot ... How to perform advanced clean-boot troubleshooting in Windows XP ... Bit Defender Online Virus Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware: how to clean registry and stop returns
    ... dedicated side of mwe wants to try to clean up the little ... Spyware demons and liberate my machine. ... Is that firewall the same as ... >| Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)