Adware from hell.

[Chuck]

I'm using Windows XP Home, and IE 6.0, all for personal use. I am the only
user of my computer.

I also have Norton Antivirus and Windows XP Firewall enabled.

I somehow managed to get some Ad Ware from hell on my computer.
The names of these programs are
Bonzi Buddy
Internet Optimizer
N-Case

I found out about these programs when my Everquest Game was interrupted by a
Pop-Up ad. and I used the End Program dialog box to discovery the following
files running:

wucevlep.exe
msbb.exe (this one is N-Case, owned by 180 Solutions Inc.)
gqivdnx.exe (this was the filename the first time is deleted it. The second
time the name was changed to; fqivdnxf.exe)

I keep my antivirus updated, and it won't stop this stuff. I uninstalled and
deleted all evidence of these programs from my system. Used Norton
Systemworks to correct the Registry, and they KEEP COMING BACK!

Just after I spend an hour cleaning them out, I find the back on my system
again...(

I really need to know;

A) How to get them off of my computer.
and
B) How to prevent them from coming back. There MUST be a network control to
block this stuff.

I believe I obtained this little GIFT from a gameing cheat code web site
call captain code as in; www.captaincode1.com (I have added the number one
to this address to prevent people from just clicking and going there.)

Thanks
Chuck

 

[JAX]

First, USE A FIREWALL. The onboard IFC is minimal. Below, you will find a
link to ZoneAlarm free firewall. Also, download, install, update and run the
two spyware removal tools linked below. The second item linked is a spyware
blocker. It does not remove spyware, it keeps *most* of it from being
installed. Install and update it and then run the spyware removal tools
again. The last link is to a popup blocker that I have found to work well.
All of these tools are freeware.

ZoneAlarm
http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp?lid=pdb_za1

SpywareBlaster
http://www.javacoolsoftware.com/spywareblaster.html

Ad-aware
http://www.lavasoftusa.com/support/download/

Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download



Popup Stopper

http://www.panicware.com/product_psfree.html



HTH, JAX

 

[Guest]

I'm using Windows XP Home, and IE 6.0, all for personal use. I am the only
user of my computer.

I also have Norton Antivirus and Windows XP Firewall enabled.

I somehow managed to get some Ad Ware from hell on my computer.
The names of these programs are
Bonzi Buddy
Internet Optimizer
N-Case

I found out about these programs when my Everquest Game was interrupted by a
Pop-Up ad. and I used the End Program dialog box to discovery the following
files running:

wucevlep.exe
msbb.exe (this one is N-Case, owned by 180 Solutions Inc.)
gqivdnx.exe (this was the filename the first time is deleted it. The second
time the name was changed to; fqivdnxf.exe)

I keep my antivirus updated, and it won't stop this stuff. I uninstalled and
deleted all evidence of these programs from my system. Used Norton
Systemworks to correct the Registry, and they KEEP COMING BACK!

Just after I spend an hour cleaning them out, I find the back on my system
again...(

I really need to know;

A) How to get them off of my computer.
and
B) How to prevent them from coming back. There MUST be a network control to
block this stuff.

I believe I obtained this little GIFT from a gameing cheat code web site
call captain code as in; www.captaincode1.com (I have added the number one
to this address to prevent people from just clicking and going there.)

Thanks
Chuck

Chuck,

Since there are not trojans, worms or viruses, your anti-virus is of
little use. They're malware that rode down the pipe when you accessed
some website (maybe the gaming website). They're annoying but are
rarely distructive.

Get a copy of adaware http://www.lavasoftusa.com/ and download their
free version. Make sure after you install it that you check for
updates. Along with antivirus protection, Adaware IMHO, is a
necessity.



**********************************************************************

People are more violently opposed to fur than leather because it's
safer to harass rich women than motorcycle gangs.
-Unknown


Remove "die spammers" to email

 

[Guest]

First, USE A FIREWALL. The onboard IFC is minimal. Below, you will find a
link to ZoneAlarm free firewall.

<snip>

JAX, I agree with everything you posted with the exception of
ZoneAlarm. I'll never install that product on my system again.
Trying to remove that software was an absolute PITA. There's just as
good free firewall programs out there that are much easier to manage
and, if necessary, remove later.

I have a hardware based firewall now and no longer need the extra cpu
cycles or overhead a software firewall requires.

cheers


**********************************************************************

People are more violently opposed to fur than leather because it's
safer to harass rich women than motorcycle gangs.
-Unknown


Remove "die spammers" to email

 

[JAX]

Congratulations, I'm glad your "hardware" firewall works well for you. We
all cannot justify one. I have used ZoneAlarm for a number of years and am
quite satisfied with it.

Cheers, JAX

 

[Guest]

Congratulations, I'm glad your "hardware" firewall works well for you. We
all cannot justify one. I have used ZoneAlarm for a number of years and am
quite satisfied with it.

Cheers, JAX

I liked ZA as well until I tried to remove it. Tiny Personal Firewall
also works well and is much easier to manipulate/remove.




**********************************************************************

People are more violently opposed to fur than leather because it's
safer to harass rich women than motorcycle gangs.
-Unknown


Remove "die spammers" to email

 

[Firefox]

I'm using Windows XP Home, and IE 6.0, all for personal use. I am the only
user of my computer.

I also have Norton Antivirus and Windows XP Firewall enabled.

I somehow managed to get some Ad Ware from hell on my computer.
The names of these programs are
Bonzi Buddy
Internet Optimizer
N-Case

I found out about these programs when my Everquest Game was interrupted by a
Pop-Up ad. and I used the End Program dialog box to discovery the following
files running:

wucevlep.exe
msbb.exe (this one is N-Case, owned by 180 Solutions Inc.)
gqivdnx.exe (this was the filename the first time is deleted it. The second
time the name was changed to; fqivdnxf.exe)

I keep my antivirus updated, and it won't stop this stuff. I uninstalled and
deleted all evidence of these programs from my system. Used Norton
Systemworks to correct the Registry, and they KEEP COMING BACK!

Just after I spend an hour cleaning them out, I find the back on my system
again...(

I really need to know;

A) How to get them off of my computer.
and
B) How to prevent them from coming back. There MUST be a network control to
block this stuff.

I believe I obtained this little GIFT from a gameing cheat code web site
call captain code as in; www.captaincode1.com (I have added the number one
to this address to prevent people from just clicking and going there.)

Thanks
Chuck

I am a firm believer in ZA I have been running it for a number of years and
found it fulfils all requirements. I wouldn't hesitate to recommend it.
AVG from Grisoft is also super for a free piece of software, I ran Norton
for a while but have re-installed AVG, no particular reason I just prefer
it.
I also run AdSubtract to remove the popups etc. seems to work for me.

 

[Bruce Chambers]

Greetings --

To deal with issues caused by any sort of "adware" and/or
"spyware,"such as Gator, Comet Cursors, Smiley Central, Xupiter,
Bonzai Buddy, or KaZaA, and their remnants, that you've deliberately
(but without understanding the consequences) installed, two products
that are quite effective (at finding and removing this type of
scumware) are Ad-Aware from www.lavasoft.de and SpyBot Search &
Destroy from www.safer-networking.org/. Both have free versions.
It's even possible to use SpyBot Search & Destroy to "immunize" your
system against most future intrusions. I use both and generally
perform manual scans every week or so to clean out cookies, etc.

Symantec provides removal instructions for n-Case spyware:
http://securityresponse.symantec.com/avcenter/venc/data/adware.ncase.html

Most antivirus applications do not scan for or protect you from
adware/spyware,because, after all, you've installed them yourself, so
you must want them there, right?

Additionally, manual removal instructions for the most common
varieties of scumware are available here:

PC Hell Spyware and Adware Removal Help
http://www.pchell.com/support/spyware.shtml


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Guest]

im sorry but i just tried both ad aware and spybot and i also tried to manually unregister dlls and change registry....its a wonder i am still here....nothing is working and im going crazy.....this one particular adware zestyfind is impossible and like yourself my daughter went to one of these cheat sites. someone please help me

 

[JAX]

The following link may be of interest to you.
http://www.experts-exchange.com/Security/Win_Security/Q_20681825.html

HTH, JAX

im sorry but i just tried both ad aware and spybot and i also tried to

manually unregister dlls and change registry....its a wonder i am still
here....nothing is working and im going crazy.....this one particular adware
zestyfind is impossible and like yourself my daughter went to one of these
cheat sites. someone please help me

 

[roger]

Hi Chuck,

Download the utility CWshredder:
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Unzip - close *all* instances of IE & OE, hit the executable and
follow
the prompts.

You can also download Hijack This from here:

http://www.mjc1.com/files/merijn/hijackthis.exe

Go here:
http://mjc1.com/mirror/hjt/

For instructions on how to use it; you have to post the log it
produces so experts tell you what is good and what is malware


Try downloading, installing and updating the
spyware removers from the links below. Run both of them.

Ad-aware
http://www.lavasoftusa.com/support/download/

Spybot S&D
http://www.safer-networking.org/index.php?lang=en&page=download


If these don't correct the problem, then get yourself a copy of
BHODemon, available at
http://www.definitivesolutions.com/bhodemon.htm .

It does not need installing - simply unzip and run the EXE program. It
is easy to use. It will find the hijackware DLL files, and give you
the ability to disable them.

Hope this helps.

 

[Chuck]

Thank you to everyone who responded. I downloaded and installed Ad Aware,
and it seems, after two days, to be doing a FINE job.

Thank you again