View Full Version : Help needed to get rid of spyware
alankearn 01-03-2006, 07:19 WINDOWS XP
Is anyone else having problems with this site "http://amch.questionmarket.com/jsc/jsc" stopping you returning to a previous web page by stopping your back button working, the only way I can return to a previous web page is clicking the NARROW BUTTON between the BACK AND FORWARD BUTTONS this gives me a list of the recent sites I have Visited sites where I can click the site I want to return to. Always at the top of the list is this problem web address and when I click it nothing happens. My QUICK LAUNCH BAR contains 16 icons for the web sites I visit the most often. This problem first affected one of them for about a week it has now affected a second one.
The problem site is
http://amch.questionmarket.com/jsc/jsc
I have trace these associate sites to it
http://www.questionmarket.com/site/...w/register.html
http://www.questionmarket.com/panel...c2b48bf7a64754e
http://christina.questionmarket.com...emo_create.html
It looks to be spyware, I have run ADAWARE (7 unrelated items detected) and SPYBOT (no items detected). I also have WINDOWS NEW DEFENDER ( previously M/S ANTISPYWARE), SPYWARE GUARD and SPYWAREBLASTER installed as a deterrent to spyware, AVAST for antivirus protection and ZONE ALARM
I have run REGEDIT and found a file named ACMru that when extended produces these two entries
ab default reg_s2 (value not set)
ab 000 reg s2 questionmarket
Is there a chance that I could get rid of this problem doing a SYSTEM RESTORE to a date before the problem arose
This webpage may be of use if you enter QUESTIONMARKET into the search box
http://www.pestpatrol.com/spywarecenter
Thanks
It could be in your cookies. Try clearing temporary internet files, and cookies, reboot, and see if that makes any difference.
System Restore is also a good option. It's quite possible that you've downloaded something (e.g. music or a game) which was hosting the malware.
As for Windows Defender....thank you very much. I have been using Microsoft Antispyware Beta 1 for some time now, but Microsoft have never informed me that this has been updated to Windows Defender Beta 2. Even when I checked for updates, it didn't show.
So I went to the site and downloaded and installed it, and it has overridden Microsoft Antispyware Beta 1. As Windows Defender Beta 2 has been available for over a month, surely MS should have informed those of us who have been using Beta 1.
alankearn 01-03-2006, 10:55 It could be in your cookies. Try clearing temporary internet files, and cookies, reboot, and see if that makes any difference.
System Restore is also a good option. It's quite possible that you've downloaded something (e.g. music or a game) which was hosting the malware.
As for Windows Defender....thank you very much. I have been using Microsoft Antispyware Beta 1 for some time now, but Microsoft have never informed me that this has been updated to Windows Defender Beta 2. Even when I checked for updates, it didn't show.
So I went to the site and downloaded and installed it, and it has overridden Microsoft Antispyware Beta 1. As Windows Defender Beta 2 has been available for over a month, surely MS should have informed those of us who have been using Beta 1.
I have deleted cookies and Internet files .I am not sure about the QUESTIONMARKET entries in the registry so until someone comes up with some advice I am going to leave it as it is .
I get regular security and update imformation via email from Microsoft.
follow the advise given here
http://answers.yahoo.com/question/?qid=1006020703686
good luck Stev Appolo
melthebell 01-03-2006, 21:49 questionmarket is a file extension related to QuestionMarket.
Below are step by step instructions to remove QuestionMarket from your computer.
Note: This process is difficult and is not recommend unless you are an expert in this field. The manual process is also dangerous as the removal process requires you to access and edit sensitive files in the registry of your machine and run the risk of totally destroying your computer.
An important point to remember when removing QuestionMarket is to delete all parts of the QuestionMarket code. This is a must as QuestionMarket will rebuild itself and will result in further spreading of the spyware parasite.
it also looks like its part of alexadex.com which if i remmeber rightly i know spybot search and destroy gets rid of
alankearn 02-03-2006, 05:22 questionmarket is a file extension related to QuestionMarket.
Below are step by step instructions to remove QuestionMarket from your computer.
Note: This process is difficult and is not recommend unless you are an expert in this field. The manual process is also dangerous as the removal process requires you to access and edit sensitive files in the registry of your machine and run the risk of totally destroying your computer.
An important point to remember when removing QuestionMarket is to delete all parts of the QuestionMarket code. This is a must as QuestionMarket will rebuild itself and will result in further spreading of the spyware parasite.
it also looks like its part of alexadex.com which if i remmeber rightly i know spybot search and destroy gets rid of
Sorry I cannot see any instructions on how to get rid of questionmarket, did you leave a link out of your post
Thanks
Alan
NickAskew 02-03-2006, 08:07 Morning Alan,
Preventing users from using the back button to leave a web site is fairly common online (if you are unlucky enough to find the dodgy sites that need to use such tactics). The fact that the web page does not let you use the back button to leave it does not mean you are infected with spyware - it just means the web site has loaded a small piece of code into your browser to ensure it behaves in that manner - such code is often lost when you manually browse away from the web site or close your web browser.
A user here mentions Spy Bot Search and Destroy, which is free spy/adware remover, I can recommend this software wholeheartedly and you can obtain it from here -->
http://www.safer-networking.org/en/download/index.html
(ignore the donation box, you do not have to donate anything to them before downloading, it is purely there if you feel the developer of the software deserves some compensation for his valiant efforts!)
You will need to click the download button next to the first entry on the web page entitled "Spybot - Search & Destroy 1.4". After installation, I would highly recommend you click the 'immunize' button - you only need to do this the first time you run the software, it protects you passively by disallowing your browser to access web sites known to be chock full of spyware/adware/malicious code.
Do not be disturbed if after running this software you are presented with a huge list of tracking cookies - cookies are the way most web sites leave information on your pc, so that they can reconstruct the options you may have chosen the last time you visited them.. very few use this information in a way that could be construed as damaging to you or your PC.
You could also use an antivirus package to eliminate code embedded within web pages that may be running to annoy rather than assist your web browsing experience. If you do not already have an antivirus package, I would highly recommend you download a COMPLETELY FREE anti virus package by the name of "AVG Anti-virus Free Edition" from here -->
http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10320142.html
You would also be wise to run a personal firewall on your computer if you aren't already - I would recommend "ZoneAlarm free edition" and you can get it from here -->
http://www.zonelabs.com/store/content/company/products/trial_zaFamily/homeofficetrial_zaFamily.jsp?dc=12bms&ctry=GB&lang=en
The download you require from this page is on the right hand side, and as it says it is for Non-Business use only.
With these three pieces of software on your PC, you'd be hard pressed to get any virus/adware/spyware/malicious script/hacker/data stolen and more.. you'd be very secure indeed! :thumbsup:
Best Regards
Nick
alankearn 02-03-2006, 09:22 Morning Alan,
Preventing users from using the back button to leave a web site is fairly common online (if you are unlucky enough to find the dodgy sites that need to use such tactics). The fact that the web page does not let you use the back button to leave it does not mean you are infected with spyware - it just means the web site has loaded a small piece of code into your browser to ensure it behaves in that manner - such code is often lost when you manually browse away from the web site or close your web browser.
A user here mentions Spy Bot Search and Destroy, which is free spy/adware remover, I can recommend this software wholeheartedly and you can obtain it from here -->
http://www.safer-networking.org/en/download/index.html
(ignore the donation box, you do not have to donate anything to them before downloading, it is purely there if you feel the developer of the software deserves some compensation for his valiant efforts!)
You will need to click the download button next to the first entry on the web page entitled "Spybot - Search & Destroy 1.4". After installation, I would highly recommend you click the 'immunize' button - you only need to do this the first time you run the software, it protects you passively by disallowing your browser to access web sites known to be chock full of spyware/adware/malicious code.
Do not be disturbed if after running this software you are presented with a huge list of tracking cookies - cookies are the way most web sites leave information on your pc, so that they can reconstruct the options you may have chosen the last time you visited them.. very few use this information in a way that could be construed as damaging to you or your PC.
You could also use an antivirus package to eliminate code embedded within web pages that may be running to annoy rather than assist your web browsing experience. If you do not already have an antivirus package, I would highly recommend you download a COMPLETELY FREE anti virus package by the name of "AVG Anti-virus Free Edition" from here -->
http://www.download.com/AVG-Anti-Virus-Free-Edition/3000-2239_4-10320142.html
You would also be wise to run a personal firewall on your computer if you aren't already - I would recommend "ZoneAlarm free edition" and you can get it from here -->
http://www.zonelabs.com/store/content/company/products/trial_zaFamily/homeofficetrial_zaFamily.jsp?dc=12bms&ctry=GB&lang=en
The download you require from this page is on the right hand side, and as it says it is for Non-Business use only.
With these three pieces of software on your PC, you'd be hard pressed to get any virus/adware/spyware/malicious script/hacker/data stolen and more.. you'd be very secure indeed! :thumbsup:
Best Regards
Nick
Hi Nick
I have thr following installed for protection
spybot
adaware
windows new defender
spyware guard
spyware blaster
avast antivirus
zone alarm
How the hell this problem arose I dont know because I am very carefull what I download
As it is I think I have (fingers crossed) got rid of it using TREND MICRO online scanner that I had once used quite a while ago but had slipped my mind.
Thanks for your reply
Alan
|
|