Spyware Removal... Help Needed!

[Yankee Scum]

Thanks to my stupidity i clicked one of Mgibson's threads here on GFY.

I do not read GFY daily butthanks to his link my computer is now infested with spyware and I cannot clean the system...

I have tried Spybot and Adaware SE....

But I still get the popups and my internet explorer is not in my control... :help!

I keep getting a about:blank

and it then connects thru startsearchers.net .... to get the popups and trying to sell my spyware removal tools... LOL!

Advice needed.

Thanks to firefox I can make this post

Ohh and enjoy your fun Mgibson!

[DutchTeenCash]

adaware gets it most of the times, did you check update and use plugins?

oh : and use FF all the time, you wont regret it

[TheSwed]

If Adaware not works,try HiJackThis http://www.merijn.org/index.html

[Yankee Scum]

Originally Posted by thinkx

adaware gets it most of the times, did you check update and use plugins?

oh : and use FF all the time, you wont regret it

Yeah i love adaware but it is drawing dead here.

[More Booze]

try microsoft antispyware

[juicy post bot]

download and install this
its from micosoft (its free) and it should get ride of the crap that is fucking with you.

[Yankee Scum]

thanks for all the suggestions trying them all!

Learned my lesson... never click links on GFY as the first person

[mardigras]

Make sure you run your spyware programs in Safe Mode.
They can't remove files if they are in use by Windows

[Babagirls]

get Webroot Spy Sweeper (i think it was $20 bucks or something)

not only does it get all that shit off of your computer, but it also protects as an anti-virus/firewall as well. it got rid of a trojan on my pc that nothing else could get.

[mardigras]

Originally Posted by thinkx

oh : and use FF all the time, you wont regret it

All of you folks so in love with FF are in for a rude awakening...

[Yankee Scum]

nothing has worked... it keeps surviving.

My explorer is :about:blank and loads thru startsearches.net

any other ideas...

[Yankee Scum]

any ideas??

This shit is getting out of hand!

[Spunky]

Get a paid one like Bullet proof..those free ones don't do shit for me and I tried them all

[Helix]

run your spyware sweeps in safe mode

[Yankee Scum]

I did Helix!

It finds it.. kills it and 5 minutes later or after reboot it resurfaces!

[juicy post bot]

go here, you will find some links to how to remove it

[MickeyG]

Originally Posted by mardigras

All of you folks so in love with FF are in for a rude awakening...

a rude awaking? wtf. Of course I expect issues in the future with FF but in the mean time it sure has been nice not getting infected.

As far as cleaning that shit off your computer, your going to need all of the above and lots of luck. I've yet to find any one app that can fully clean a pc.

[MickeyG]

Originally Posted by Yankee Scum

I did Helix!

It finds it.. kills it and 5 minutes later or after reboot it resurfaces!

Get HijackThis and remove it from the startup files. Then run all those various scanners.

Best of luck, you're going to need it.

[Quickdraw]

Neuber.com
Check out their Task Monitor.

SpyCatcher and CounterSpy are good programs. CounterSpy will not run with the Microsoft software installed(but is supposed to be the best)

Now, pay close attention to the credit cards you have used with that computer. They might be 'out there'

[e-god]

Originally Posted by mardigras

Make sure you run your spyware programs in Safe Mode.
They can't remove files if they are in use by Windows

what he said

[Yankee Scum]

Safe mode
|
\/
Hijackthis
|
\/
Adaware SE
|
\/
Spybot
|
\/
Microsoft Anitispyware

Result... killed it for 5 minutes and it is back!

[MickeyG]

man I feel for ya, all you can do is keep repeating the process, try deleting any files the scanners find manually.

[hvidlogspusher]

http://www.ewido.net great program

[rayzor]

i've been removing these nasty pests for years! i've learned that NO spyware cleaner will fix those with the nasty, annoying popups. some of the paid ones are the same ones that infect you and try to sell you a fix! best bet is to use hijack this. it's not exactly a cleaner. it just scans your memory and lets you know what's being loaded... so if you're not tech savvy.. you might want to hire a professional or get a computer buddy to help you because if you delete the wrong thing it can really hose your system! if you want to try it yourself, run hijack.. and research on google for every file listed.. sometimes the spyware might have changed it's name and make things harder. odds are if the filename sounds funny, new (around the time infection started) or is not in the directory of any known program, it's a spyware. delete them with hijackk.. if it comes back, odds are great it's part of some spyware and you'll need to go to safe mode w/command prompt and remove it there. you'll have to keep doing this over and over until the infection is clear because if you don't remove the whole thing it'll install itself again.

good luck! and don't blame me if you fuck up your system because you don't know what your'e doing!

[Yankee Scum]

im so close to giving up.. nothing helps i even bought friggin spyware remover and used it in safemode!

Thanks alot Mgibson fucking scumbag!

Format c: is like 2 seconds away

[directfiesta]

Originally Posted by Yankee Scum

any ideas??

This shit is getting out of hand!

Ask 12clicks... He knows alot about that

[austinth]

turn off system restore, then reboot in safe mode and try cleaning again

[Steve]

Originally Posted by Yankee Scum

im so close to giving up.. nothing helps i even bought friggin spyware remover and used it in safemode!

Thanks alot Mgibson fucking scumbag!

Format c: is like 2 seconds away

that shit got me like a week ago
I now have my operating system on a smaller harddrive, and all my work is on larger slave drives

the idea being, next time I get fucked, I wont lose my work, it'll just be a format c: and reinstall OS

I killed about 24 working hours trying to remove that shit - no use (I tried all the stuff here, and more, read numerous forums, etc) - frankly, my time is worth way more than a new set of hard drives and some OS. I bet your time is worth more, too.

[Quickdraw]

Originally Posted by Yankee Scum

im so close to giving up.. nothing helps i even bought friggin spyware remover and used it in safemode!

Thanks alot Mgibson fucking scumbag!

Format c: is like 2 seconds away

which one did you buy?

[Snake Doctor]

Go to the control panel and turn system restore off.

Then reboot into safe mode and run adaware.

Then reboot.

[HpicAnn]

Originally Posted by More Booze

try microsoft antispyware

this is good i used too and took all the spywares out of the computer..

[Helix]

control alt delete to get to the windows task manager, then one by one look up the processes that are running in this chart located here:
http://www.liutilities.com/products/...rocesslibrary/
once you have identified the bug, google for removal instructions. I know, it sucks ass, but it works.

[Quickdraw]

Originally Posted by Helix

control alt delete to get to the windows task manager, then one by one look up the processes that are running in this chart located here:
http://www.liutilities.com/products/...rocesslibrary/
once you have identified the bug, google for removal instructions. I know, it sucks ass, but it works.

The Neuber task manager is much easier ;)

[Yankee Scum]

Originally Posted by Babagirls

get Webroot Spy Sweeper (i think it was $20 bucks or something)

not only does it get all that shit off of your computer, but it also protects as an anti-virus/firewall as well. it got rid of a trojan on my pc that nothing else could get.

It failed!!!

Last move.. the almighty format c:

Karma is a bitch Mgibson hope you get assfucked soon!

[wjxxx]

Download HijackThis 1.99.1
do a system scan and save logfile
post logfile in this thread

[Yankee Scum]

Originally Posted by Lenny2

Go to the control panel and turn system restore off.

Then reboot into safe mode and run adaware.

Then reboot.

Thanks for the feedback mate!

But at this point after so many failed attempts and not even a programer of mine could remove it..

I have decieded that format c: will be in my best interest.. cannot take the chance that tehre is a keylogger stealing my hard work and ideas!

BTW i icq'ed you yesterday... will probally go a day or so before i have the time to talk due to upgrading my network and 3 computers.. this move by a lowlife like Mgibson was a wake up call...!

[DWB]

I only use Fire Fox and up until last week I have not had a single problem. However this week starts something new... I am getting some NASTY ones now using FF. SO much for hassle free surfing.

[Quickdraw]

Well, if you do format, make sure you have no 'hidden' partitions or it will all be for nothing.

[Yankee Scum]

Originally Posted by Quickdraw

Well, if you do format, make sure you have no 'hidden' partitions or it will all be for nothing.

please advice on how to locate hidden partitions... or will they go away by delting partiotions and letting xp create new ones?

[Snake Doctor]

Originally Posted by Yankee Scum

Thanks for the feedback mate!

But at this point after so many failed attempts and not even a programer of mine could remove it..

I have decieded that format c: will be in my best interest.. cannot take the chance that tehre is a keylogger stealing my hard work and ideas!

BTW i icq'ed you yesterday... will probally go a day or so before i have the time to talk due to upgrading my network and 3 computers.. this move by a lowlife like Mgibson was a wake up call...!

Ok no prob.

A guy on my bowling team fixes computers for a living. 90% of his work is spyware removal.

He told me to follow those steps, because the "smart" spyware will use system restore to reinstall itself after you remove it with adaware.....and it can hide itself from adaware if your system is running in normal mode.

Hence turning system restore off and running the scan in safe mode.

I think you should try it before you format C....but it's your call.

[Yankee Scum]

Originally Posted by Lenny2

Ok no prob.

A guy on my bowling team fixes computers for a living. 90% of his work is spyware removal.

He told me to follow those steps, because the "smart" spyware will use system restore to reinstall itself after you remove it with adaware.....and it can hide itself from adaware if your system is running in normal mode.

Hence turning system restore off and running the scan in safe mode.

I think you should try it before you format C....but it's your call.

Will give it one more try but only because realbigracks.com rox

[Sgt Sausage]

I am kind of an internet security pro. I simply do not get spyware, or infections of ANY kind.

Yer all suggesting anti-spyware appz. Altho your intent is honrorable, you must remember alot of spyware are simply trojans, and malicious scripts(virii).

Get yourself an anti-virus app, a good one. My recommendation is for F-Secure. (as far as I am concerned, there are no other anti-virus software out there)

F-Secure is the most thorough, bar none.

How do I know this? I myself am a hacker(an ethical hacker), scanner, and long time exploiter. No, I don't spread virii or destroy shit, I just tinker.

Let me tell you, systems protected with F-Secure were always THE hardest to get by, thus, I use it for myself.

Anyone wanting real methods for keeping their systems clean, and the right software to do it, shout.

Peace...

[Quickdraw]

Originally Posted by Yankee Scum

please advice on how to locate hidden partitions... or will they go away by delting partiotions and letting xp create new ones?

Start|Control Panel|Administrative Tools|Computer Management will take you an area to see what you have. I cannot guarantee this is perfect

If you are going to 'format' I understand fdisk is a better option(but only if you have the FULL Operating system install disc and not just the recovery that is shipped with most models)

I still think you should try the options I mentioned above(with waht Lenny suggested for safe mode etc). It will save you the reinstall of all your stuff.

[Cassie]

www.microsoft.com and install their beta spyware removal tool.

edit: this is what happens when tons of people ask for a moron to be banned for various legitimate reasons and he's NOT.

[sumphatpimp]

its in the registry.
you are going to have to learn how to edit the registry to get ride of it.
thats why it comes back.

[Snake Doctor]

Originally Posted by Sgt Sausage

I am kind of an internet security pro. I simply do not get spyware, or infections of ANY kind.

Yer all suggesting anti-spyware appz. Altho your intent is honrorable, you must remember alot of spyware are simply trojans, and malicious scripts(virii).

Get yourself an anti-virus app, a good one. My recommendation is for F-Secure. (as far as I am concerned, there are no other anti-virus software out there)

F-Secure is the most thorough, bar none.

How do I know this? I myself am a hacker(an ethical hacker), scanner, and long time exploiter. No, I don't spread virii or destroy shit, I just tinker.

Let me tell you, systems protected with F-Secure were always THE hardest to get by, thus, I use it for myself.

Anyone wanting real methods for keeping their systems clean, and the right software to do it, shout.

Peace...

Are you affiliated with them in any way?

[Quickdraw]

Originally Posted by Sgt Sausage

Yer all suggesting anti-spyware appz. Altho your intent is honrorable, you must remember alot of spyware are simply trojans, and malicious scripts(virii).

Get yourself an anti-virus app, a good one. My recommendation is for F-Secure. (as far as I am concerned, there are no other anti-virus software out there)

Yes, what he said. ( I know nothing of F-secure, but it looks good from here)

When I cleaned my system(s) out I used a combination of Norton, AVG, and Pandasoftware online tool. Along with the other ones above..

Mind you, by the time, I cleaned my system, my cc's had been compromised and had been used, ALOT.

[latinasojourn]

are you using a computer with a "restore" function.

if so go back to last week.

[Toonlogos]

SIMPLE AND EFFECTIVE METHOD TO REMOVE THIS -

If using WinXP, just roll back to the last checkpoint before you got this thing on your PC. Voila, gone!

[Sgt Sausage]

I just use Malwarbytes now.