spyware attack

[catfish]

I have been trying to help someone all day rid his computer of spyware attackers. The OS is WindowME and uses "cox-internet" as his internet provider. I installed "ad-aware" software and rid his computer of 284 objects. Once I was finished I begin having difficulty connecting to the internet. The drivers for his NIC card was corrupt and I had to re-install. Once I got this corrected, I was able to start bringing up IE. IE would begin opening his Home page and then another page would take over, "incredifind.com". I had to download from another computer the "uninstall" program for "incredifind.com". I successfully removed "incredifind.com". I tried IE again, this time I received the following message: http://search.dr.shopnav.com/searchcat.........search.dr.shopnav.com ". What do I do now?:evil:

[crunchie]

Try spybot S&D as well, as it can often find stuff that adaware misses.
For 'shopnav' removal, download from http://www.adwarecops.com/?Google & that should remove it.

[caperjack]

If using AD-AWare set it up like this so it scans deeper!:)
Might i suggest Ad-Aware
Download the latest version of Ad-Aware at http://www.lavasoftusa.com/support/download/

After installing AAW, and before running the program, you NEED to FIRST update the reference file following these instructions. http://www.lavahelp.com/howto/updref/index.html

Now do the following:

- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Scanning Engine:
check: "Unload recognized processes during scanning."

- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Cleaning Engine:
Check: "Let Windows remove files in use after reboot."

Press "Scan Now"

- Check option "Use Custom scanning options"
- Check option "Activate In-Depth Scan"
- Press "Select drives\folders to scan"
- Select the active partition which is usually C:

Now press "Next" to let Ad-aware scan your drives...
It will find a number of "bad" files and registry keys.
Right-click in that pane and choose "select all"

Now press "Next" again.
It will ask you whether you'd like to remove all checked items. Click OK.

Finally, close Ad-Aware, and reboot.
That ought to get rid of most of your spyware.

[GrimJack]

I suggest that you get proxomitron at http://www.proxomitron.info/; this program is one I highly recommeng as part of any safe computing environment.

my list includes:
ZoneAlarm - firewall
AVG - virus protector
spybot-S&D - spy killer
Ad-aware - spy killer
Ad-Watch - guards your registry (comes with Ad-Aware)

If anyone has any suggestions on what to add to this list, I welcome them

GrimJack

[Nabeel]

Read this Article about how to deal with spyware. http://www.pawas.com/articles/Spyware_Adware/Deal_With_The_Spyware_From_Inside_Out.htm