View Full Version : Spyware and viruses
roth ghost 11-12-2004, 17:19 Could anyone tell what is the best way to get rid of spy ware, I have tried loads of software, but they still keep spreading.
And also does anyone know what kick people get from viruses by sending them out I get loads of e-mails blocked with them attached.
Cheers
Originally posted by roth ghost
And also does anyone know what kick people get from viruses by sending them out I get loads of e-mails blocked with them attached.
Cheers
They are just very foul human beings!
If you need help- seek out Martin_s or.... Vidster I think.
They seem to have sound knowledge of computers, ask them for advice.
Try using firefox instead of internet explorer. People say it helps prevent spyware.
roth ghost 11-12-2004, 17:35 thaks for that.
what is firefox and will it get rid of all the crap thats downloaded itself already?
Bikertec 11-12-2004, 17:39 Firefox is an alternative Internet explorer the browser your using :)
roth ghost 11-12-2004, 17:47 Originally posted by Bikertec
Firefox is an alternative Internet explorer the browser your using :)
Hello there see you found me! :-)
Hi,
No, Firefox won't get rid of the crap that's there already, I'm afraid.
You'll need to run some Spyware zappers, and soemthing like Adaware might also help to get rid of the less nasty stuff.
Also, do you run anti-virus software?
If not, start by gtting AVG from Grisoft - it's free and seems to be pretty good. However, I'm not an expert in these matters so other suers may have better suggestions!
Joe
Martin_s 11-12-2004, 20:18 Originally posted by roth ghost
Could anyone tell what is the best way to get rid of spy ware, I have tried loads of software, but they still keep spreading.
Ok... It all depends on just how badly compromised your machine really is as to what you need to do. Something you MUST take note of before doing anything.
Because viruses and spyware are often written to damage your system or at least stay on it... You may find that removing them may render your computer completely unusable.
If you want to try and resolve this yourself grab copies of the following:
- AdAwareSE
- SpyBot Search & Destroy (v1.3)
- AVG free version (Anti Virus)
- CWShredder (v2)
- HiJack This
- EasyCleaner
- ZoneAlarm (Free version)
If you already have an anti-virus system, then don't install AVG but do make sure you have the most up to date version of your anti-virus program and that it hasn't run out, or been disabled.
Then it's a case of installing each program, getting any updated signature files through each programs autoupdate (not all program have these).
Then:
- Disconnect yourself from the net and start running scans.
- Anti-virus first... (if it turns up nothing it's entirely possible your anti-virus has been compromised so think seriously about installing AVG)
- Next Adaware and Spybot... deleting anything that turns up
- If you have strange search bars on your browser window or were being redirected to unusual search engine sites all the time, then run CWShredder.
- Next up is EasyCleaner.. do a registry scan and delete any orphaned links
OK, on the whole this will clean your system to about 85/90% level... but unfortunately the really insiduous stuff usually requires some expert help and assistance. So, next up you should install Zonealarm as your firewall and only allow the following programs to access the net:
- Internet Explorer
- Generic Host Process for Win32 Services
... anything else should be denied.
Ok.. now, unzip hijackthis and put the hijackthis.exe file on your desktop... Run a scan and then export a log which you'll need to post on here..
DON'T delete anything using HiJackThis until you are told it's clear to do so... If you ignore this advice you WILL regret it!
Right, from there, myself or someone familiar with HiJackThis can then take a look at the log and work out what spy/malware goodies exist and which lines to scan and delete...
And, then finally, when we've gotten your system cleaned up you will need to spend a couple of hours (or longer if you don't have a broadband connection) getting all the windows updates for your copy of windows.
Finally, when you're sure it's all working, you can start letting other programs past your zonealarm firewall but be careful what you let through or it's pointless having a firewall in the first place.
Needless to say this takes hours of time to sort out and if you're not careful you could completely FUBAR your system so if this is a mission critical machine (eg: you have vital data, work, essays, phone numbers, etc.. on there) then my advice is to get your machine to a professional who can take an image of your hard drive before you do anything else..
It's also worth noting that sometimes it's easier to wipe your hard drive, scan it for boot sector viruses and then restore your system from a PC restore disk or by reinstalling your operating system and software from scratch...
As a rule of thumb I usually need about 3 to 9 hours to fix a machine that's suffered from poor security so whatever you do it's going to take time and patience..
And also does anyone know what kick people get from viruses by sending them out I get loads of e-mails blocked with them attached.
There's a discussion about this on the forums elsewhere but the short version seems to be "vandal mentality" and power... Who knows..
Hope that helps.
roth ghost 11-12-2004, 20:29 thanks for that, it seems quite a nightmare realy to rid my pc of everything, bykertec was realy good and came and sorted alot of it out, so maybe i'll stay with it as it is at the moment, and if all else fails I could throw it through the window!
thanks for the info anyway!
ToryCynic 11-12-2004, 20:34 I have mirrored
the set-up file for Spyware - Search And Destroy here. (www.freewebs.com/23064048/sybotsd.htm)
I have mirrored the set-up file for Ad-Aware v 6.0 here. (www.freewebs.com/23064048/adawarev60.htm)
HTH
Alex
Ps - If it takes ages then Google them both. I am looking into buying a domain so I can upload (and mirror) files etc.
ToryCynic 11-12-2004, 20:47 Originally posted by Martin_s
you'll need to post on here...
Roth Ghost: Possibly stating the obvious, but to do a screen dump (of the Hi-Jack This Log for Martin to look at), hit Alt and "Prnt Scrn" (ensure you are in the actual "Hi-Jack This" window. Then go to Photbucket (www.photobucket.com), set-up an account, post the URL to here. Alternatively, you can use webspace you may already have.
Cheers
Alex
Hiya roth ghost:)
If you need any links to various software you can find them Here (http://www.softwaretipsandtricks.com/forum/showthread.php?s=&threadid=15972)
Martin_s seems to have covered all the bases. All i would add is to:
1. Do all your scans in safe mode (Press f8 repeatedly while booting and select safe mode when the menu comes up).
2. If using windows xp, turn off System restore, reboot and turn it back on again.
3. Delete all your cookies and temporary internet files, including offline content (if you are given the choice).
I would also recommend performing a disk defregmentation (In safe mode). This will help speed up any scans of your pc.
Hope this helps :D
Martin_s 12-12-2004, 14:05 Originally posted by amhudson119
to do a screen dump (of the Hi-Jack This Log for Martin to look at), hit Alt and "Prnt Scrn" (ensure you are in the actual "Hi-Jack This" window.
Alex... useful information in another context but Hijack this allows you to save the log scan into a text file so there's no need to do a screen dump...
hint: watch the scan button change when you've completed a scan. ;)
ToryCynic 12-12-2004, 14:25 Originally posted by Martin_s
Alex... useful information in another context but Hijack this allows you to save the log scan into a text file so there's no need to do a screen dump...
hint: watch the scan button change when you've completed a scan. ;)
Ah yes, I remember now. (Y)
Alex
Originally posted by Martin_s
..... scan it for boot sector viruse...
The Free version of AVG is now able to do this on boot up.
Originally posted by Martin_s
It's also worth noting that sometimes it's easier to wipe your hard drive.......reinstalling your operating system and software from scratch...
I have never had to format a HD to remove virii etc. and there should really be no need to do so. ;-)
Simply boot into DOS/Linux from a floppy (laughs @ XP users) and run some nice 32-bit sector editor/hex ed or some other basic system level tool/low level recovery tool!
Also, another useful trick for Windows PCs, is to continually back-up the entire registry and run the TeaTimer prog that comes with SpyBot!
ToryCynic 12-12-2004, 18:34 Originally posted by sccsux
I have never had to format a HD to remove virii etc. and there should really be no need to do so. ;-)
Hmm... Iif your machine is so "clogged-up" it is easier to reformat, reinstall the O/S and you're away.
Alex
Originally posted by amhudson119
Hmm... Iif your machine is so "clogged-up" it is easier to reformat, reinstall the O/S and you're away.
Alex
Maybe, but you'll be none-the-wiser, which means there's a pretty good chance of the same mistakes/infestations creeping back in.
If a PC gets in such a state, then maybe that is down to the user being allowed access to technology without the ability to operate/use it correctly?
Maybe users should have to prove a level of competancy before they are allowed to access/purchase a PC.
Martin_s 12-12-2004, 22:51 Originally posted by sccsux
Maybe, but you'll be none-the-wiser, which means there's a pretty good chance of the same mistakes/infestations creeping back in.
Yes, but in my experience people tend to wake up to things like windows update, etc... once they've been hit once or even twice... Especially if the data is important and they end up losing it... or, in the process of getting the data recovered, it costs them a significant amount of money and/or time.
If a PC gets in such a state, then maybe that is down to the user being allowed access to technology without the ability to operate/use it correctly?
Maybe users should have to prove a level of competancy before they are allowed to access/purchase a PC.
Let's be realistic here, it's never going to happen... There's plenty of schemes like the Computer driving license which aims to get users to develop some basic skills...
At the end of the day if people get burned too many times they'll stop using computers.. or they'll learn...
ToryCynic 12-12-2004, 22:58 Yes, but the ECDL only shows people how to use the Office suite to its full potential?
Alex
Martin_s 12-12-2004, 23:01 Originally posted by sccsux
I have never had to format a HD to remove virii etc. and there should really be no need to do so. ;-)
Simply boot into DOS/Linux from a floppy (laughs @ XP users) and run some nice 32-bit sector editor/hex ed or some other basic system level tool/low level recovery tool!
With the best will in the world, how many people do you know who aren't experts who would have a clue what hex is much les how to boot to DOS/Linux... and that's before they've even had a chance to try and work out what the heck they're supposed to do when they're there.. Let's be realistic...
To be completely honest I HATE telling people to reinstall their operating system but there are plenty of times when cleaning, patching, scanning and re-scanning will take so damned long that given the low "need" for their data, a format, reinstall is cost effective and good sense. Especially if little Johnny has been downloading every free game and utility onto the PC and had Kazaa running cos it's "cool"...
Treating Windows users with scorn won't win you any friends and ultimately if you are to provide useful advice you have to accept the situation as is at present... It's also worth noting that there's a whole slew of Firefox users who've been chuckling away at Internet Explorer users for the same smug reasons and the fact remains that virii and exploits for Firefox or
Linux have only been limited because most script kiddies don't see the point in attacking a low userbase system. Watch as that changes.. it's already happening with Firefox and there are plenty of exploits available in packages that are reported in various packages and the kernel in Linux too.
Yes, you can clean them yourself but you sound like you have a clue when it comes to Linux which is unrealistic to expect of the average home user... We're not talking experts here.. or else why on earth would they be on this forum, asking for help.
Also, another [b]useful trick for Windows PCs, is to continually back-up the entire registry and run the TeaTimer prog that comes with SpyBot!
Heck... it's useful, nay essential to backup all your important data but definitely getting the registry backed up too... Definitely good advice..
I work with someone that has been running Win98, since 1998 without any protection of any kind at all.
He asked me why it takes 20mins for his pc to boot!
At first i offered to go round and sort the pc out but after thinking about it for a while, i told him to just reinstall the OS.
In certain cases i think it is better to reinstall rather than spend 4,5,6,7,8,... who knows? how many hours removing spyware/adware/virus's and trojans.
Reinstalling the OS should return his system to the state it was in when he bought it. He will be chuffed!!
Originally posted by Martin_s
Treating Windows users with scorn won't win you any friends and ultimately if you are to provide useful advice you have to accept the situation as is at present
I wasn't treating Windows users with scorn, how could I when I run Windows('98 ) here (on a LAN server with 3-4 clients) but have had no Spyware/Malware/Scumware/$@~£ware.
All I was stating, is that you never need to do a Format to recover a smashed Windows!
Originall posted by SSSCUX
(laughs @ XP users)
This was aimed @ Microsoft, as they (XP users) don't even get the chance to boot into DOS as XP has no native DOS support, which makes true recovery a very lengthly/involved process (the System Restore "feature" of XP also leaves a lot to be desired IMO).
Maybe my comments:
Maybe users should have to prove a level of competancy before they are allowed to access/purchase a PC.
were a little strong. Maybe the PC suppliers/manufacturers should not be allowed to ship PCs with an unpatched/non updated OS, or without some kind of virus scanner/detector? Or include some sort of security policy documentation that the user should employ to help with the smooth running of the system??
However, my point stands. Inherited power without some underlying discipline in the relevant field will always result in problems.
Martin_s 13-12-2004, 13:07 Originally posted by sccsux
I wasn't treating Windows users with scorn, how could I when I run Windows('98 ) here (on a LAN server with 3-4 clients) but have had no Spyware/Malware/Scumware/$@~£ware.
All I was stating, is that you never need to do a Format to recover a smashed Windows!
We seem to be talking from the same hymn sheet to a point, just different sections... I obviously misinterpreted your comments on the linux side of things so apologies on that front. At the same time I think it's unrealistic to see the average home user taking the time to learn skills in DOS or Linux shell to be able to debug and fix a compromised machine.
Expert users will have this sort of knowledge and be able to work around it, but that knowledge comes at a hefty price and we all have a limited budget so in a lot of cases it's going to be cost and time effective for the end user to go for the reformat and reinstall option.
Maybe the PC suppliers/manufacturers should not be allowed to ship PCs with an unpatched/non updated OS, or without some kind of virus scanner/detector? Or include some sort of security policy documentation that the user should employ to help with the smooth running of the system??
I'm in agreement there, I find it insane that PC vendors can send out PC's that still require upwards of 4 hours connected to the net to get updated just for Windows and Office.. The anti-virus pre-installed seems to be getting tackled though, if many of the systems I've seen advertised are anything to go by... People still need to register though and often they just do the whole "cancel" thing on auto-pilot which is dumb as ditchwater but human nature when it comes to playing with a new toy. Doesn't help that the information is often in techno babble... *sigh*
A "guide to security" would definitely be a good plan though I suspect and is more than feasible... Chances are we'll see more and more systems coming with this sort of thing though as sales drop through people getting more and more paranoid about security issues.
However, my point stands. Inherited power without some underlying discipline in the relevant field will always result in problems.
I wouldn't disagree... but pragmatically speaking, so long a people only really affect themselves and their own data it's something that people will either learn pro-actively or learn the hard way.. I think we both agree on which way we'd recommend.
Originally posted by Martin_s
...so long a people only really affect themselves and their own data it's something that people will either learn pro-actively or learn the hard way
The problem is, however, that when connected to the internet, the potential for damaging other peoples equipment/data is greatly increased with a lack of security. The risk is also increased with MS shipping full raw socket support built in to XP (not a good idea with an OS for the GP) and activated by default!!
I'll save the Unix/Xenix/BSD/Linux/Windows Operating Systems debate for another time ;-) (I have used/still use all)!
Originally posted by sccsux
.....If a PC gets in such a state, then maybe that is down to the user being allowed access to technology without the ability to operate/use it correctly?
No mate. It's down to the spotty nerds that create Spyware/viruses.
Originally posted by sccsux
Maybe users should have to prove a level of competancy before they are allowed to access/purchase a PC.
I know many people who own cars, but have no idea how to check brake pad/tyre wear, or even the basic fluid levels. And that's after they've proved a level of competancy to be allowed to purchase/own a car.
I feel the big problem for 'ordinary Joe' PC owners is that PC's/internet/AV/adware/viruses etc are constantly evolving so you can spend hours just keeping your hardware/software up to date.
I've owned a PC since '01 and, with average 'ordinary Joe' PC knowledge, had managed to keep the PC clean until earlier this month. I think this may have been due to my AV (Pccillin 2000) becoming unsupported by Trend. This was unbeknownst to me cos up to the point I got infected the AV pattern updates had been working fine (hence I hadn't bought new AV cos I assumed it was upto date!!).
Having spent 10+ hours trying to clean the PC (I wasn't sure what was wrong, so I found a forum, ran thru all the regular spyware progs, plus getting desperate with manual registry cleaning - eek!) I finally decided to restore the OS from the simple-to-use restore disk I got with the PC (don't think it formatted the drive).
It seems to have worked.
Fortunately I didn't have much data on the PC that I hadn't backed up and, with Broadband, downloading the OS upgrades didn't take too long.
Originally posted by sccsux
Maybe users should have to prove a level of competancy before they are allowed to access/purchase a PC.
I couldnt agree with you more. It is simply astounding the number of so-called responsible people who apparently seem to believe you can just go out (preferably to Currys, Dixons or PC World :suspect: :suspect: :suspect: :suspect:), buy a computer, plug it in and hey presto you've got your self a mega time-saving piece of kit that will work just like a washing machine.
John Lewis Partnership evidently also agree with us because they stopped selling their own brand IT kit, flog Sony, Toshiba, HP etc AND have just introduced their own brand washing machine range (in Central London) to their own brand mattresses. :D
witpucks 21-07-2006, 00:41 I would get Zonealarm suite, it is the best antivirus, anti spyware and firewall software available with little effect on the RAM load, if any in comparison to Norton
I would get Zonealarm suite, it is the best antivirus, anti spyware and firewall software available with little effect on the RAM load, if any in comparison to Norton
witpucks, this thread was started two years' ago, and the last post before yours was in November last year....why have you resurrected it, when there are several more recent threads covering this subject? I see that you have done that to a number of threads....WHY? :loopy:
If you want to pay for your AV and firewall packages, that's up to you, but what's the point when you can get as good, if not better for free?
I use the free version of Zone Alarm, and it's fine. I also believe that having separate programs for each security measure is a better option because, if one goes wrong, it doesn't mean the whole lot is affected, and it's possible to find an alternative (free), if necessary.
Also, I've heard some horror stories about Zone Alarm Pro ~ some of the extras, that aren't on the free version, can be incompatible with other programs.
|
|