RE: Spyware/Programs Installed Themselves - SpyBot Doesn't Remove

From: MAP (MAP_at_discussions.microsoft.com)
Date: 11/05/04


Date: Fri, 5 Nov 2004 10:49:07 -0800


"Al Smith" wrote:

> Several programs installed themselves. They have slowed the
> computer and feature all sorts of popups and attempts at downloading
> other programs.
>
> Spybot - Search and Destroy took out a lot of stuff, but didn't
> alleviate any of the problems
>
> Help?
>
>
>

Sometimes,when you remove malware it will stop your TCP/IP
stack from working (Internet connection).
Winsock or LSP-fix will correct the problem,Download first.
Note to anyone using NOD32 Anti-Virus software,Do Not delete the
"imon.dll" this fix reports,That is your e/mail scanning engine.

YES-You need more than 1 malware program,the one's below are all free
and work well.
LSP-fix- http://www.cexx.org/lspfix.htm
Spybot S&D - http://www.safer-networking.org/en/index.html
CWS Smart Killer- http://www.safer-networking.org/minifiles.html
                 
About Buster- http://www.spychecker.com/program/aboutbuster.html
Ad-Aware SE - http://www.lavasoftusa.com/software/adaware/
CWShredder - http://www.majorgeeks.com/download4086.html
Hijack this - http://www.majorgeeks.com/download3155.html\
Hijacjthis tutorial -http://forums.maddoktor2.com/index.php?showtopic=165
SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html
SpywareGuard - http://www.javacoolsoftware.com/spywareguard.html
WinPatrol - http://winpatrol.com
Win Patrol is NOT a malware program,but it will inform you if anything writes
to your registry or changes your home/search page,a nice little program.
BHODemon - http://pcworld.com/downloads/file_download.asp?fid=23611&fileidx=1
Bazooka -http://www.kephyr.com/spywarescanner/index.html
asquared2 "Trojan Remover" - http://www.emsisoft.com/en/
Socklock- http://nsclean.com/socklock.html
A nice site -
http://groups.msn.com/TeMercInternetSecuritySite/malwarecountermeasures.msnw
NOD32Anti-Virus Free 30 day trial
 http://nod32.com/download/trial.htm
 
A link for free online virus and trojan scanners.
http://virusall.com/downscan.html

A listing of BHO's
http://www.spywaredata.com/bho.php?current_page=0

To see if that freeware program you are about to inststall
is infested with spyware check it out first at this link.
http://www.spychecker.com/

To help stop unauthorized downloads via your activex controls change your
default settings.
These settings are good for XP. The wording should be close for other systems
as well.
Go to control panel and open "internet options.
Click on the security tab then custom level.
make sure these settings are as follows.

Download signed active x controls>set to prompt
Download unsigned active x controls>set to disable
Initialize and script active x controls not marked as safe>set to disable
Run active x controls and pluggins>set to enable
Script active x controls marked safe for scripting>set to enable
Java permissions>set to high
Launching programs and files in a IFRAME" > Prompt
Installation of Desktop items"> Prompt
Navigate sub-frames across different domains>prompt



Relevant Pages

  • RE: Cant remove spyware/virus program.
    ... > using spybot for the last week or so. ... To help stop unauthorized downloads via your activex controls change your ... Download signed active x controls>set to prompt ...
    (microsoft.public.windowsxp.security_admin)
  • RE: website redirect question
    ... Is there a way to change it maybe in the registry or ... > Download Ad-aware and Spybot, update both and scan your system with them, ... > To help stop unauthorized downloads via your activex controls change your ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Rundll message at startup
    ... >> Download BOTH Ad-Aware and Spybot S&D update them both and scan your ... >> To help stop unauthorized downloads via your activex controls change ... >> Kerio Personal Firewall ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: website redirect question
    ... > have virus scan. ... Download Ad-aware and Spybot, update both and scan your system with them, ... To help stop unauthorized downloads via your activex controls change your ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: internet explorer has been hijacked by
    ... I changed it to my internet comp. ... > through their support page, I was told to download cwsheddar, After I ran it, ... To help stop unauthorized downloads via your activex controls change your ...
    (microsoft.public.windows.inetexplorer.ie6.browser)