adaware and spywareno

L

Lizard

ever since i downloaded the latest deffinitions i have been getting two
hits of spyware named SpywareNo! i let adaware clean it but it keeps
comming back. i googled for a fix and found instruction for removal
manually. it still came back.

has anyone run into this? any other fixes?

ArchiveData(spywareno.bckp)
Referencefile : SE1R91 08.02.2006
======================================================

SPYWARENO
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : S-1-5-21-1923653786-2536883754-323391154-1004\software
\microsoft\windows\currentversion\ext\stats\{72267f6a-a6f9-11d0-bc94-
00c04fb67863}
obj[1]=RegData : software\microsoft\internet explorer\desktop\components
"GeneralFlags"


tia
 
L

Lizard

thanks for the response but been there, done that. the program says its
innocent of spyware, others say no. the next question is why does it come
back after using the remove instructions. btw, it does not show up when i
use hijackthis. it is found only with adaware.

tia



(e-mail address removed) wrote in @z14g2000cwz.googlegroups.com:
 
S

Sharktbbtfy

Lizard said:
ever since i downloaded the latest deffinitions i have been getting two
hits of spyware named SpywareNo! i let adaware clean it but it keeps
comming back. i googled for a fix and found instruction for removal
manually. it still came back.

has anyone run into this? any other fixes?

ArchiveData(spywareno.bckp)
Referencefile : SE1R91 08.02.2006
======================================================

SPYWARENO
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : S-1-5-21-1923653786-2536883754-323391154-1004\software
\microsoft\windows\currentversion\ext\stats\{72267f6a-a6f9-11d0-bc94-
00c04fb67863}
obj[1]=RegData : software\microsoft\internet explorer\desktop\components
"GeneralFlags"


tia
Click to expand...
Hi,

Are you running WindowsMe or XP? If so, have you turned off system restore?

Sharktbbtfy
 
L

Lizard

yes, xpsp2. all updated. turned off restore, ran adaware and spybot in
safe mode, deleted prefetched files, even tried manually deleteing registry
keys shown in adaware log manually and still comes back.

thanks, any more ideas?
 
L

Lizard

steve,

thanks for the research. i suspected i had a false positive since i could
not find the entries mentioned in the spywareno/sherrif revoval guides.
i'm still puzzled as to how to get rid the fp's, something is generating
this. no scans find the "Win32.TrojanDownloader.Small.awa" dropper that
could be reinstalling the two reg entries when i delete them, unless they
are regular entries to begin with.

thanks again
 
B

bambam

thanks for the response but been there, done that. the program says
its innocent of spyware, others say no. the next question is why does
it come back after using the remove instructions. btw, it does not
show up when i use hijackthis. it is found only with adaware.
Click to expand...

Post your hijackthis log, it will be there somewhere.
 
J

jmatt

If you want to go down the HiJackThis path, here is the info.

Download HiJackThis, install & run to get a log file. Don't fix
anything yet.
Important: Create a specific folder on your hard drive called
HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double
click on C: then right click and select New then Folder and name it
HijackThis. Download and unzip HijackThis.exe into this folder.
You then post the log file at a site provided below & it will tell you
what to fix.
http://www.merijn.org/downloads.html
http://tomcoyote.com/hjt/
Securing Your Computer: Temporarily Disable Real Time Monitoring
Programs
http://wiki.castlecops.com/Securing_Your_Computer:_Temporarily_Disable_Real_Time_Monitoring_Programs
Some security programs with active monitoring processes are known to
interfere with automatic scanners and can actually prevent HJT fixes
from taking effect.
Please turn off or disable any of the following programs you may have,
before running your preliminary scans and for the duration of your HJT
cleanup (should you post a log). To do disable these programs, please
follow the instructions provided in the respective sections. (After
your cleanup is complete, you should reactivate these protective
programs.) :
HJT Tutorials
http://www.bleepingcomputer.com/forums/tutorial42.html
http://www.spywareinfo.com/~merijn/htlogtutorial.html#r
http://www.spywareinfo.com/~merijn/htlogtutorial.html
http://castlecops.com/HijackThis.html

HijackThis log file analysis ( online )
http://hijackthis.de/index.php?langselect=english
Or,
http://startup.networktechs.com/page-68.html
http://hjt.iamnotageek.com/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Desktop Icons - Show and Hide 1
Desktop Icons - Show and Hide 2 2
F8 will not give menu for windows safe mode. 2
Registry Entry! 8
ran adaware, lost internet 8
Danger warning! to the public and note to Databaseben 27

Top