943,929 Members | Top Members by Rank

Ad:
Sep 9th, 2004
0

Spyware?

Expand Post »
Ok, just recently, when I start internet explorer, it automatically starts up with some site with this address: http://your-searcher.com/index.htm. I assume that I am infected with spyware and was wondering how to get rid of it. Spybot doesn't seem to be helping.
Similar Threads
Reputation Points: 10
Solved Threads: 1
Junior Poster
cargenius42 is offline Offline
122 posts
since Aug 2004
Sep 10th, 2004
0

Re: Spyware?

That sound like a Hijacker to me- I'll move this to the Security forum so that our spyware experts can offer assistance.

SpyBot isn't the be-all and end-all solution for removing malicious programs; as a matter of fact, there is no single program which can find and fix all of the "spyware" variants out there. At the very least, you should also download Ad Aware and HijackThis (download links are in my sig below).

Ad Aware is very similar to SpyBot, but it is updated more frequently and often catches things that SpyBot doesn't; using the two programs together will get rid of all but the nastiest infections. Run the 2 consecutively (the order doesn't matter), choose to have them fix everything they identify, and reboot after each program finishes its job. Make sure to check for and install the latest updates for each program before running them; new updates for Ad Aware are often released every two days or so.

Once you've run Ad Aware and SpyBot:

- Reboot into safe mode and, for every user account listed under C:\Documents and Settings, delete the entire contents of these folders:

1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- Delete the entire content of your C:\Windows\Temp folder.
- Empty your Recycle Bin.
- Reboot normally.

If you get any messages concerning the deletion of system files such as desktop.ini or index.dat, just choose to delete those files; they'll be automatically regenerated by Windows if needed.

After doing all of the above, create a new separate folder on your drive for HijackThis, move the program into thids folder, and run it from there. (Don't run HJT from within any Temp or Temporary Internet folder, and don't run it directly from your desktop.) Do not have HJT fix anything yet, only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here. The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.
Last edited by DMR; Sep 10th, 2004 at 12:25 am.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Sep 11th, 2004
0

Re: Spyware?

Ok, I think I fixed the problem. I found a page through google where someone had the same problem. I followed his steps to get rid of the spyware and it seemed to work. Thanks for all of your help tho!!!
Reputation Points: 10
Solved Threads: 1
Junior Poster
cargenius42 is offline Offline
122 posts
since Aug 2004
Sep 11th, 2004
0

Re: Spyware?

Cargenius, to help keep yourself from being reinfected, use spywareblaster; it will install a list of known pests into your browsers Restricted Sites zone.

http://www.javacoolsoftware.com/

DMR, your link to Resources... didn't work for me -- is it just me or has the link gone bad?
Team Colleague
Reputation Points: 63
Solved Threads: 213
Posting Maven
dlh6213 is offline Offline
2,962 posts
since Jul 2004
Sep 11th, 2004
0

Re: Spyware?

Quote originally posted by dlh6213 ...
DMR, your link to Resources... didn't work for me -- is it just me or has the link gone bad?
Looks like the site got rearranged/reprogrammed; I've updated my link.


cargenius42,

Could you tell us exactly what the fix was or give a link to the instructions you followed? That will help other members who might be having similar problems.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003
Sep 11th, 2004
0

Re: Spyware?

I went to http://www.webuser.co.uk/cgi-bin/for...b=5&o=93&part=. Someone had a similar problem and I tried the solution and it worked.
Reputation Points: 10
Solved Threads: 1
Junior Poster
cargenius42 is offline Offline
122 posts
since Aug 2004
Sep 12th, 2004
0

Re: Spyware?

Thanks for the info.
DMR
Team Colleague
Reputation Points: 221
Solved Threads: 369
Wombat At Large
DMR is offline Offline
6,439 posts
since Dec 2003

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Viruses, Spyware and other Nasties Forum Timeline: Dangerous BUG in WINXP
Next Thread in Viruses, Spyware and other Nasties Forum Timeline: Runaway Cursor





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC