Spyware advise

Hi

I have run the following;

ComboFix
SpyBot
SDFix
SmitfraudFix
smitRem

But the spy ware keep coming back. What else can I run?

Thanks

Regards

PD43
Fri Mar 28 18:13:36 PDT 2008

"John" <info@nospam.infovis.co.uk> wrote:

>I have run the following;
>
>ComboFix
>SpyBot
>SDFix
>SmitfraudFix
>smitRem
>
>But the spy ware keep coming back. What else can I run?

You might try a stick of dynamite.

Hold it in your mouth and light the fuse.

Shenan
Fri Mar 28 18:15:51 PDT 2008

John wrote:
> I have run the following;
>
> ComboFix
> SpyBot
> SDFix
> SmitfraudFix
> smitRem
>
> But the spy ware keep coming back. What else can I run?

"the spy ware" eh?

LavaSoft Ad-Aware
Spybot Search and Destroy
SuperAntiSpyware
HijackThis!

Sometimes you need to do them in safe mode.

Follow that up with Computing Common Sense to keep from being re-infested.

Also - when asking for help please give as much information as possible.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

PA
Fri Mar 28 18:44:58 PDT 2008

What "spy ware"?

What anti-virus application or security suite is installed? What
anti-spyware applications (other than Defender)? What third-party firewall
(if any)?

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

John wrote:
> Hi
>
> I have run the following;
>
> ComboFix
> SpyBot
> SDFix
> SmitfraudFix
> smitRem
>
> But the spy ware keep coming back. What else can I run?
>
> Thanks
>
> Regards

PA
Fri Mar 28 18:46:49 PDT 2008

David H. Lipman wrote:
<snip>
> Forums where you can get expert advice for HiJack This! (HJT) and
> Deckard's
> System Scanner Logs...

And http://aumha.net
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

John
Fri Mar 28 18:59:01 PDT 2008

Both the above attached screens appear from time to time.

Thanks

Regards

"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:uT8cs6TkIHA.484@TK2MSFTNGP06.phx.gbl...
> What "spy ware"?
>
> What anti-virus application or security suite is installed? What
> anti-spyware applications (other than Defender)? What third-party
> firewall (if any)?
>
> Unexplained computer behavior may be caused by deceptive software
> http://support.microsoft.com/kb/827315
>
> Run a /thorough/ check for hijackware, including posting your hijackthis
> log to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine2.blogspot.com/
> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>
> When all else fails, HijackThis v2.0.2
> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
> review by an expert in such matters, not here.**
>
> If the procedures look too complex - and there is no shame in admitting
> this isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
> AumHa VSOP & Admin http://aumha.net
> DTS-L http://dts-l.net/
>
>
> John wrote:
>> Hi
>>
>> I have run the following;
>>
>> ComboFix
>> SpyBot
>> SDFix
>> SmitfraudFix
>> smitRem
>>
>> But the spy ware keep coming back. What else can I run?
>>
>> Thanks
>>
>> Regards
>

David
Fri Mar 28 19:16:18 PDT 2008

From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>

| David H. Lipman wrote:
| <snip>
>> Forums where you can get expert advice for HiJack This! (HJT) and
>> Deckard's
>> System Scanner Logs...
|
| And http://aumha.net

That would throw Boater Dave for a loop :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

David
Fri Mar 28 19:21:12 PDT 2008

From: "John" <info@nospam.infovis.co.uk>

| Here is one (attached).
|
| Firewall: ISA server 2006 as it is connecte dto win 2003 sbs server.
| Antivirus: trend Micro CSMS
|

PC-Antisyware is a rogue application!

As I stated before... go to an expert forum.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

Colin
Fri Mar 28 21:24:20 PDT 2008

A new HID?

"PD43" <pauld1943@comcast.net> wrote in message
news:os5ru3p0d6210lkd7b40k6t9j9mpg5ij23@4ax.com...
> "John" <info@nospam.infovis.co.uk> wrote:
>
>>I have run the following;
>>
>>ComboFix
>>SpyBot
>>SDFix
>>SmitfraudFix
>>smitRem
>>
>>But the spy ware keep coming back. What else can I run?
>
> You might try a stick of dynamite.
>
> Hold it in your mouth and light the fuse.

Colin
Fri Mar 28 21:27:12 PDT 2008

Also, Windows Defender
http://www.microsoft.com/downloads/details.aspx?FamilyID=435BFCE7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en
and the MSRT
http://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en.

"Shenan Stanley" <newshelper@gmail.com> wrote in message
news:%23WXTvpTkIHA.4480@TK2MSFTNGP03.phx.gbl...
> John wrote:
>> I have run the following;
>>
>> ComboFix
>> SpyBot
>> SDFix
>> SmitfraudFix
>> smitRem
>>
>> But the spy ware keep coming back. What else can I run?
>
> "the spy ware" eh?
>
> LavaSoft Ad-Aware
> Spybot Search and Destroy
> SuperAntiSpyware
> HijackThis!
>
> Sometimes you need to do them in safe mode.
>
> Follow that up with Computing Common Sense to keep from being re-infested.
>
> Also - when asking for help please give as much information as possible.
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>

pcbutts1
Fri Mar 28 22:50:13 PDT 2008

Use Remove-it version 18, it's fast and free. It now has over 12500
signatures to remove All variants of Rogue scanners, Desktop/Homepage
Hijackers, Trojans, Codec's, and related Malware/Spyware. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

"John" <info@nospam.infovis.co.uk> wrote in message
news:urC4QjTkIHA.5160@TK2MSFTNGP05.phx.gbl...
> Hi
>
> I have run the following;
>
> ComboFix
> SpyBot
> SDFix
> SmitfraudFix
> smitRem
>
> But the spy ware keep coming back. What else can I run?
>
> Thanks
>
> Regards
>

windmap
Fri Mar 28 23:32:07 PDT 2008

Fully patch the computer.Update all your Virus/spyware programs.Go for
realtime/On Access spyware protection.Try third party firewall like Zone
alarm.You may also try Peerguardian http://phoenixlabs.org/pg2/ .
Delete the application data of uninstalled / deleted programs.
Try this free windows unwanted files cleaner Cleanup!
http://www.stevengould.org/index.php?Itemid=69&id=15&option=com_content&task=view
Protect your internet explorer and Mozilla firefox settings by tweaking your
Antivirus program.
Delete all system restore points.

"John" <info@nospam.infovis.co.uk> wrote in message
news:urC4QjTkIHA.5160@TK2MSFTNGP05.phx.gbl...
> Hi
>
> I have run the following;
>
> ComboFix
> SpyBot
> SDFix
> SmitfraudFix
> smitRem
>
> But the spy ware keep coming back. What else can I run?
>
> Thanks
>
> Regards
>

~BD~
Sat Mar 29 01:24:41 PDT 2008

AHOY THERE!

I heard your call! :)

Have a great weekend.

--
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:unPKhLUkIHA.4140@TK2MSFTNGP04.phx.gbl...
> From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>
>
> | David H. Lipman wrote:
> | <snip>
>>> Forums where you can get expert advice for HiJack This! (HJT) and
>>> Deckard's
>>> System Scanner Logs...
> |
> | And http://aumha.net
>
> That would throw Boater Dave for a loop :-)
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>
>

PA
Sat Mar 29 12:53:18 PDT 2008

David H. Lipman wrote:
> From: "PA Bear [MS MVP]" <PABearMVP@gmail.com>
>
>> David H. Lipman wrote:
>> <snip>
>>> Forums where you can get expert advice for HiJack This! (HJT) and
>>> Deckard's
>>> System Scanner Logs...
>>
>> And http://aumha.net
>
> That would throw Boater Dave for a loop :-)

What a /wonderful/ idea!

PA
Sat Mar 29 12:56:14 PDT 2008

You've got a Zlob infection, most likely accompanied by at least one
rootkit, Vundo and SDBot-variant infections. Follow the instructions
previously posted by David or myself.
--
~PA Bear

John wrote:
> Both the above attached screens appear from time to time.
>
> Thanks
>
> Regards
>
> "PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
> news:uT8cs6TkIHA.484@TK2MSFTNGP06.phx.gbl...
>> What "spy ware"?
>>
>> What anti-virus application or security suite is installed? What
>> anti-spyware applications (other than Defender)? What third-party
>> firewall (if any)?
>>
>> Unexplained computer behavior may be caused by deceptive software
>> http://support.microsoft.com/kb/827315
>>
>> Run a /thorough/ check for hijackware, including posting your hijackthis
>> log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine2.blogspot.com/
>> http://www.elephantboycomputers.com/page2.html#Removing_Malware
>>
>> When all else fails, HijackThis v2.0.2
>> (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware with
>> assistance from an expert. **Post your log to
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html,
>> http://forums.subratam.org/index.php?showforum=7,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>> review by an expert in such matters, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Admin http://aumha.net
>> DTS-L http://dts-l.net/
>>
>>
>> John wrote:
>>> Hi
>>>
>>> I have run the following;
>>>
>>> ComboFix
>>> SpyBot
>>> SDFix
>>> SmitfraudFix
>>> smitRem
>>>
>>> But the spy ware keep coming back. What else can I run?
>>>
>>> Thanks
>>>
>>> Regards

PA
Sat Mar 29 12:57:06 PDT 2008

Defender won't be able to deal with this although running the MSRT might be
another preliminary step to take before posting a HJT log in a forum.

Colin Barnhorst wrote:
> Also, Windows Defender
> http://www.microsoft.com/downloads/details.aspx?FamilyID=435BFCE7-DA2B-4A6A-AFA4-F7F14E605A0D&displaylang=en
> and the MSRT
> http://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en.
>
> "Shenan Stanley" <newshelper@gmail.com> wrote in message
> news:%23WXTvpTkIHA.4480@TK2MSFTNGP03.phx.gbl...
>> John wrote:
>>> I have run the following;
>>>
>>> ComboFix
>>> SpyBot
>>> SDFix
>>> SmitfraudFix
>>> smitRem
>>>
>>> But the spy ware keep coming back. What else can I run?
>>
>> "the spy ware" eh?
>>
>> LavaSoft Ad-Aware
>> Spybot Search and Destroy
>> SuperAntiSpyware
>> HijackThis!
>>
>> Sometimes you need to do them in safe mode.
>>
>> Follow that up with Computing Common Sense to keep from being
>> re-infested.
>>
>> Also - when asking for help please give as much information as possible.
>>
>> --
>> Shenan Stanley
>> MS-MVP
>> --
>> How To Ask Questions The Smart Way
>> http://www.catb.org/~esr/faqs/smart-questions.html

sgopus
Sun Mar 30 15:23:00 PDT 2008

You need to take more of your anti grouchy old fart medicine, it appears to
be wearing off.

"PD43" wrote:

> "John" <info@nospam.infovis.co.uk> wrote:
>
> >I have run the following;
> >
> >ComboFix
> >SpyBot
> >SDFix
> >SmitfraudFix
> >smitRem
> >
> >But the spy ware keep coming back. What else can I run?
>
> You might try a stick of dynamite.
>
> Hold it in your mouth and light the fuse.
>

PD43
Sun Mar 30 15:48:11 PDT 2008

sgopus <sgopus@discussions.microsoft.com> wrote:

>You need to take more of your anti grouchy old fart medicine, it appears to
>be wearing off.

I like myself the way I am ;->

Spyware advise

Re: Spyware advise by PD43

Re: Spyware advise by Shenan

Re: Spyware advise by David

Re: Spyware advise by PA

Re: Spyware advise by PA

Re: Spyware advise by John

Re: Spyware advise by David

Re: Spyware advise by David

Re: Spyware advise by Colin

Re: Spyware advise by Colin

Re: Spyware advise by pcbutts1

Re: Spyware advise by windmap

Re: Spyware advise by ~BD~

Re: Spyware advise by PA

Re: Spyware advise by PA

Re: Spyware advise by PA

Re: Spyware advise by sgopus

Re: Spyware advise by PD43