Spyware Help

[fedupjohn]

I need need some help with a popup virus. Spy Bot can't see it and Microsoft's virus program can't fix it. This program redirects the browser to a website that sells software to fix the problem that it causes.

Any help will be appreciated.

[jdm]

Run a BitDefender scan:

http://www.bitdefender.com/scan8/ie.html

[js1138]

Boot in safe mode and run your spyware checkers. The bad guys are probably reinstalling themselves.

Running scans in safe mode avoids this.

[Gamecock]

Check the time difference between posts. I started replying before your post went up.

Why don't you go get a cup of coffee and quit playing thread nazi.

[xcamel]

It is a good site. the "cures" work if you read and follow the instructions carefully.

[Quix]

Sunday morning to you GC,

I have Zone Alarm . . . finally got Norton uninstalled. I have Spy Sweeper and Spy Hunter. Hunter and Zone Alarm seem to catch most. I think MS's Beta got uninstalled somehow when I was downloading their new thing which I aborted.

Am in the middle of getting over Norton somehow fighting with Zone Alarm and locking things up. Could only do one action and wait minutes for the system to catch up. Horrid. Uninstalling Norton has helped 95%.

My question for the esteemed GC . . . What mix of such programs do you use. I want Norton's Utilties and GOBACK and maybe their antivirus. But I don't think their antispyware is as good as the other's.

Your views?

[xcamel]

You might want the extra cup.. You responded to me, after I posted my suggestion to the freeper the had the problem. (twice, no less)

[Osage Orange]

I have found that running ADAWARE, and SPYBOT 2-4 times a week and running AV nightly still isn't enough at times...So Hijackthis....is great.

What I do is run a hijackethis log...copy it to hijackthis.de write down what it tells me to delete...Then open your PC in safe mode..run hijackthis again...and delete what I can.

Seems to certainly help keep the malware/spyware/viruses at bay.....

FWIW-

[Osage Orange]

BSR...you've helped me in the past. Maybe I can return a small portion back to you.....

Hijackthis.de is a service to help decipher a hijackthis log...Seems to work too.

FWIW-

[Gamecock]

Good day Quix!

I use Norton Anti-Virus, ZoneAlarm Firewall (free edition) and Webroot Spy Sweeper.

I update patterns daily and run scans at least weekly, more frequently during virus scares.

My two computers seem to work best with that combo.

[Toby06]

Geez, who peed in your wheaties this morning.

I like seeing multiple recommendations for a specific fix.

If people can't provide their input here because you did so a few moments before, FR would become and incredibly boring website.

[xcamel]

My only comment was who the help was directed to... that's all.
I didn't need the info.. I provided it.
Sheesh.

[Toby06]

[Gamecock]

You posted your recommendation for Hijack This a full 1 minute and 24 seconds before I did.

I started my reply before you hit "Post" or I would not have posted my recommendation. In the 1 minute and 24 second interim I wrote my pithy post and double checked that the product was still available.

(twice, no less)

Read my post again. I was agreeing with you endorsment of Spybot and was throwing Highjack This into the mix will you were doing the same.

Lighten up.

[Bloody Sam Roberts]

Cool. I always thought it was just a utility to print out the settings...leaving one to separate the wheat from the chaff.

It's been a while since I've used it. I'll have to check out the site in more detail.

Grazie.

[ClaireSolt]

I am having the same problem. Norton and Spybot don't get it. I will chqck bak later to see if someone who had had this problem says what got rid of it.

[JRios1968]

Uh oh...the "N" word. Someone's lost an argument!

[Bloody Sam Roberts]

I will check bak later to see if someone who had had this problem says what got rid of it.

It sounds very much like a Browser Helper Object (BHO) that has been added into your system by a nasty.

Download a copy of "HiJackThis!" and it can show what items you have on your system. Most are good and should be left alone. But some can create problems like this redirect behavior.

[holymoly]

Though you've gotten some good advice already, you might want to scan your system with Dr. Web CureIT.

Dr. Web CureIT is "a FREE anti-virus and anti-spyware scanner based on the Dr.Web engine which will help you quickly scan and cure, if necessary, a computer operated by MS Windows 95OSR2/ 98/Me/NT 4.0/2000/XP without installation of the Dr.Web Anti-virus."

Dr. Web CureIT does not require installation.

Since it appears your browser has been hi-jacked, I assume you're using MSIE.

If you MUST use MSIE, make sure you use Spybots' "Immunize" feature. Also, enable "SDHelper" and "TeaTimer".

Note: There's a small bug in the Spybot 1.4 TeaTimer pop-up, addressed here: Solution to fix the pop-ups in TeaTimer

Also, download, update, and use SpywareBlaster. There is a small bit of overlap with Spybots' "Immunize" feature, but this will not cause any problems.

If you ARE using MSIE, you may want to consider an alternative:

Mozilla.org Firefox the Mozilla Suite

Opera

[holymoly]

And before I forget, if you aren't already using one, you may want to consider a HOSTS file:

Blocking Unwanted Parasites with a Hosts File