Greetings from Manila, Philippines & My bad experience

[Guest]

hello everyone, i am new in Security so i am still learning the ropes. i
decided to sign-up in this forum because i personally experienced being
attacked by spywares even though Windows Defender was running.

It was a very disappointing day for me when SpyFalcon and similar
"antispywares" (Pest Control, Winantivirus Pro, SpyFighter, & Ad Project) got
hold of my workstation and force-peddled to me their stuffs... i had pop-up
warnings which i thought came from WD which confused me (later i found it
came from popentertain.com/ch - swiss origin) as it said that my computer was
taken controlled by 195.126.18.11 and asked me to choose from among the 4
antispywares they were peddling... i eventually bought online SpyFalcon
because it was relentlessly popping-up and offering itself. to my dismay,
the software DOES NOT WORK and seems to have encouraged more ADS coming in
(grrr!!!). BTW, they were using a billing company called psbills.biz

I reported this to the FBI via IC3.

meantime, i had to install a trial version of another antispyware to run
side-by-side with WD and reconfigured my anti-virus software (Avast!) to use
WEB SHIELD (proxy server that checks malicious softwares).

i am not really sure if this is enough that's why i looked for this forum to
seek help and at the same time, hope that my experience become a lesson, too.

i look forward to any help you can provide.

surf safely, good buddies!
..e.

 

[plun]

Hi EZD

Well, this is a real "the bad guys" mess with several unwanted programs
and probably a Vundo and/or Smitfraud infest.

How to remove Spyfalcon (Smitfraud)
http://www.bleepingcomputer.com/forums/topic43659.html

How to remove Winantivirus(Winfixer/Vundo)
http://www.bleepingcomputer.com/forums/topic18610.html

"Rouge" applications:
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Good luck

regards
plun

 

[Guest]

Greetings from Greenville, SC, the home of BJU (even though I am a Furman U.
man myself). If you have not gotten SpyFalcon completely clean off your
system, I suggest your follow the procedures provided by bleeping computer:
http://www.bleepingcomputer.com/forums/topic43659.html
There are additional spyware/trijan removal procedures provided here:
http://www.bleepingcomputer.com/forums/forum55.html
Please note that this is a link to the first of five pages of instructions
for different exploits. I do not know what other anispyware you added, but I
am using Defender alongside Webroot Spysweeper and the free version of Ewido
Anti-Malware. I also keep the old but reliable Spybot S&D and Ad AwareSE
Personal as on demand scanners because sometimes they come into play in
removing some of the more stubborn pests.These new threats are complicated
and combine spyware and trojan downloaders and a layered approach with 1
anti-virus, firewall, several anti-spyware applications, and an anti=tojan
may be necessary. I don't believe any one tool can provide adequate
protection. Many folks are using other protections such as activeX kill bits
(e.g. SpywareBlater by JavaCool) or hosts file entries to block known bad web
sites and domains. I personally use the MSN toolbar with anti-phishing filer
for IE along with the Site Advisor toolbar to warn of bad websites. These
pest keep finding new ways to invade and it is good to block as many paths as
possible. Be aware, however, that using two anti-spyware products with
realtime protections or shields can cause some compatibility problems. I am
not a pro, just an ordinary user, but I have seen SpyFalson invade PCs that
were completely up to date and seemed well protected.

 

[Guest]

Hi Plun, Old Rebel
thanks for your advises. i followed the instructions and successfully
removed traces of SF (i.e. i have uninstalled the program before). i then
applied the Panda Online Scan but it produced errors that terminates the
scan; i solved most of the errors but it keeps on telling me that Windows
OneCare has to be uninstalled - I DON'T HAVE OneCare in my system :-( (well,
i used to until a month ago)...

any help, please?

TIA
..e.

 

[Guest]

I am careful about online scans because they can conflict with my installed
real time anti-virus program. I have used Panda without a problem, but I
heard about others having problems. Make sure you are using the online scan
and not the trial downloaded one. Most anti-virus programs won't install a
download program with another installeld anti-virus already present. I have
successfully used the Trend Micro online scanner, but sometimes it crashes
Internet Explorer. I solved that problem by using Firefox browser with the
Trend Micro Java kernel online scan. And I have success using the Windows
Live Safey Center Scan
http://safety.live.com/site/en-US/default.htm
Personally, I think it's better to have a good installed anti-virus program.
If my anti-virus and anti-spyware tools do not solve a malware problem, I
would submt a HijackThis log for analysis at bleeping computer or another
forum.
http://www.bleepingcomputer.com/forums/HijackThis-Logs-and-Analysis-f22.html
http://castlecops.com/forums.html
http://www.tomcoyote.org/
http://www.dslreports.com/forum/cleanup
For cleaning your registry of remnants of uninstalled programs, I recommend
CCleaner
CCleaner - Crap Cleaner free software download -
http://www.ccleaner.com/

 

[plun]

Hi again

It seems to be some mess nowadays with different protection programs
that they don´t "like" each other........especially if these programs
comes from MS.... "The cake" is maybe to small for everyone
to eat

One more standard procedure for PC cleanings is to run CCleaner
both file cleaning and Issues (registry cleaning)
Maybe this only is a registry "left behind" about One Care.

www.ccleaner.com (uncheck Yahoos toolbar during install if you don´t
like toolbars )

regards
plun

Ps Greetings from Sweden Ds