1/1/2007 1:32 AM

This adware returns to my computer daily after I delete it. Is Cydoor at all
useful to me? Is there a way to nuke it permanently?

I have WinXP Pro with SP2.

Thank you,

Barry Karas

bkaras wrote:
> 1/1/2007 1:32 AM
>
> This adware returns to my computer daily after I delete it. Is
> Cydoor at all useful to me? Is there a way to nuke it permanently?
>
> I have WinXP Pro with SP2.

Any P2P software installed?

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

May depend as to how you deleted it, and whether you are using an app that
reinstalls it
http://www.spywareguide.com/spydet_7_cydoor.html
PS Also turn off sys restore untill you are sure sys is clean

"bkaras" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> 1/1/2007 1:32 AM
>
> This adware returns to my computer daily after I delete it. Is Cydoor at
all
> useful to me? Is there a way to nuke it permanently?
>
> I have WinXP Pro with SP2.
>
> Thank you,
>
> Barry Karas
>

"bkaras" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> 1/1/2007 1:32 AM
>
> This adware returns to my computer daily after I delete it. Is Cydoor at
> all useful to me? Is there a way to nuke it permanently?
>
> I have WinXP Pro with SP2.
>
> Thank you,
>
> Barry Karas

Help with malware:
All MS-MVP Sites.
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://www.elephantboycomputers.com/...moving_Malware
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/darnit.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/kb/827315

So How Did I Get Infected Anyway?
For quite a few people it's by installing Messenger Plus, whose ads for
malware don't identify the malware as such and try to convince you that you
owe it to the author. See also:
http://www.wilderssecurity.com/showthread.php?t=27971
Don't ever do a "default" install of anything. Always choose Custom and see
what else is being carried along. Don't install any extras you're not sure
of.

--
Frank Saunders, MS-MVP OE/WM
http://www.fjsmjs.com
Answer in newsgroup. Don't send mail.

"Don't ever do a "default" install of anything. Always choose Custom and
see
what else is being carried along. Don't install any extras you're not sure
of."

I totally agree.

But do e-mail messages and/or attachments carry malware?

Thank you,

Barry Karas


"Frank Saunders, MS-MVP OE/WM" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "bkaras" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> 1/1/2007 1:32 AM
>>
>> This adware returns to my computer daily after I delete it. Is Cydoor at
>> all useful to me? Is there a way to nuke it permanently?
>>
>> I have WinXP Pro with SP2.
>>
>> Thank you,
>>
>> Barry Karas
>
> Help with malware:
> All MS-MVP Sites.
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://www.elephantboycomputers.com/...moving_Malware
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/darnit.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>
> Unexplained computer behavior may be caused by deceptive software.
> http://support.microsoft.com/kb/827315
>
> So How Did I Get Infected Anyway?
> For quite a few people it's by installing Messenger Plus, whose ads for
> malware don't identify the malware as such and try to convince you that
> you owe it to the author. See also:
> http://www.wilderssecurity.com/showthread.php?t=27971
> Don't ever do a "default" install of anything. Always choose Custom and
> see what else is being carried along. Don't install any extras you're not
> sure of.
>
> --
> Frank Saunders, MS-MVP OE/WM
> http://www.fjsmjs.com
> Answer in newsgroup. Don't send mail.
>
>

From: "bkaras" <(E-Mail Removed)>

< snip >

|
| But do e-mail messages and/or attachments carry malware?
|
| Thank you,
|
| Barry Karas
|

Y E S !


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Barry

Of course they do, in fact this is probably the most common path of infection for virus and malware. You can also be infected by simply opening a webpage. Go to some of the links that Frank posted to get a better understanding of the how and why. This will also get you up to speed on resources for removing malicious content.

--

Ronnie Vernon
Microsoft MVP
Windows Shell/User



bkaras wrote:
> "Don't ever do a "default" install of anything. Always choose Custom
> and see
> what else is being carried along. Don't install any extras you're
> not sure of."
>
> I totally agree.
>
> But do e-mail messages and/or attachments carry malware?
>
> Thank you,
>
> Barry Karas
>
>
> "Frank Saunders, MS-MVP OE/WM" <(E-Mail Removed)> wrote in
> message news:(E-Mail Removed)...
>> "bkaras" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> 1/1/2007 1:32 AM
>>>
>>> This adware returns to my computer daily after I delete it. Is
>>> Cydoor at all useful to me? Is there a way to nuke it permanently?
>>>
>>> I have WinXP Pro with SP2.
>>>
>>> Thank you,
>>>
>>> Barry Karas
>>
>> Help with malware:
>> All MS-MVP Sites.
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://www.elephantboycomputers.com/...moving_Malware
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/darnit.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>>
>> Unexplained computer behavior may be caused by deceptive software.
>> http://support.microsoft.com/kb/827315
>>
>> So How Did I Get Infected Anyway?
>> For quite a few people it's by installing Messenger Plus, whose ads
>> for malware don't identify the malware as such and try to convince
>> you that you owe it to the author. See also:
>> http://www.wilderssecurity.com/showthread.php?t=27971
>> Don't ever do a "default" install of anything. Always choose Custom
>> and see what else is being carried along. Don't install any extras
>> you're not sure of.
>>
>> --
>> Frank Saunders, MS-MVP OE/WM
>> http://www.fjsmjs.com
>> Answer in newsgroup. Don't send mail.

"DL" wrote

> May depend as to how you deleted it, and whether you are using an app that
> reinstalls it
> http://www.spywareguide.com/spydet_7_cydoor.html
> PS Also turn off sys restore untill you are sure sys is clean
>
> "bkaras" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> 1/1/2007 1:32 AM
>>
>> This adware returns to my computer daily after I delete it. Is Cydoor at
> all
>> useful to me? Is there a way to nuke it permanently?
>>
>> I have WinXP Pro with SP2.

You should not turn off System Restore before the system is clean. Malware
in a System Restore point can't hurt you unless you restore to that point.
Also if something hoses they system during the cleaning you don't have SR
try to get you back to a running state so you can try something different.
After the system is clean then turn off system restore to clear out all the
restore points, then turn it on and create a new one.

--
Rock [MVP - User/Shell]

"bkaras" wrote

> 1/1/2007 1:32 AM
>
> This adware returns to my computer daily after I delete it. Is Cydoor at
> all useful to me? Is there a way to nuke it permanently?
>
> I have WinXP Pro with SP2.

Malware Removal
http://www.elephantboycomputers.com/...moving_Malware

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper's Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

--
Rock [MVP - User/Shell]

bkaras wrote:

> But do e-mail messages and/or attachments carry malware?


If an E-mail message is in HTML, yes it can carry malware. For that reason I
always choose to read all mail as plain text, even if it sent in HTML.

And attachments can be anything at all, and they can certainly be malware.

You often see advice not to open attachments unless they are from someone
you know, but I think that's extremely dangerous advice. It implies that
the opposite is true--that it's safe to open an attachment from someone you
know or trust.

In fact, almost the exact opposite is true. Many modern viruses and worms
spread by sending themsleves to everyone in the infected party's address
book. That means it's *more* likely, not less likely, that a message from
someone you know and trust is likely to be infected.

My advice is to open attachments only it's something you are expecting; even
if you get it from a close family member, it's wise to check with them first
before opening.

My own personal practice is even more stringent. I almost never open
attachments at all; I make an occasional exception, but only for an
extremely trusted source, who I am confident applies safeguards as good as
my own.

--
Ken Blake - Microsoft MVP Windows: Shell/User
Please reply to the newsgroup