D
Derrick
I had my music files in a folder. I ran antispyware and
now I have no MUSIC. What the??????????
now I have no MUSIC. What the??????????
J
JohnF.
This has happened several times (noted and dealt with in great detail in
these newsgroups) to Kazaa users who keep all their music files in a folder
under the Kazaa folder.
They may not be completely gone yet - open the quarantine and wait, maybe a
few hours depending on how many files you had. If they appear in the
quarantine, restore them and then move them and then back them up.
I'd tell you to stop using Kazaa too but I 'll let the RIAA do that.
--
If you are under attack and MSAS does not seem to help:
*Submit suspected spyware report in the tools menu of MSAS*
PREP YOUR MACHINE FIRST!
- IF you are using Spybot S/D, UN-Immunize your computer
- IF you are using Adaware, turn off AD-Watch
- Disable all other active anti-spy applications
- Dump all temporary file locations and Internet files
1. Download:
lspfix.exe www.cexx.org/lspfix.htm
winsockxpfix.exe www.snapfiles.com/get/winsockxpfix.html
ccleaner.exe www.ccleaner.com
killbox.exe www.bleepingcomputer.com/files/killbox.php
2. Clean out all temp file locations with ccleaner.exe
3. Install and use killbox to delete stubborn files
4. Reboot into safe mode - http://tinyurl.com/pfca
5. Run MSAS at least twice in full/deep mode
6. Run a robust, updated antivirus software scan
7. Reboot into normal mode,see if problem has been corrected
8. If you think something is there but can't see it, download:
- Blacklight by F-Secure
www.europe.f-secure.com/exclude/blacklight/blbeta.exe
- RootKitRevealer by SysInternals
www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml
9. If your problem is Virus or Security patch related:
In the United States or Canada, call 1-866-PCSAFETY
MS will provide free support for those issues.
Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy
- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
http://support.microsoft.com/kb/811259
LSPFix - www.cexx.org/lspfix.htm
Winsockxpfix - www.snapfiles.com/get/winsockxpfix.html
- Install SpywareBlaster to block malware apps from
installing on your machine. Does not actively run
on your machine, you run it, it makes changes that
protect you.
http://www.javacoolsoftware.com/
- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx
*** For assistance in battling infestations***
- Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
- Save it to C:\hjt (new folder)
- Open it and select "Scan and Save Log"
- Send it to Ron Kinner as an attachment
- Ron's email address is (e-mail address removed)
- Put Hijack in the subject so he knows it's not spam
Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware
4) If that fails, install VB6 runtime files:
http://www.softwarepatch.com/windows/vbrun6download.htm
- To report false positives:
www.microsoft.com/athome/security/spyware/software/isv/fpform.aspx
- To submit disputes or requests:
www.microsoft.com/athome/security/spyware/software/isv/cdform.aspx
- To learn more about how MS analyzes suspected spyware:
www.microsoft.com/athome/security/spyware/software/isv/analysis.mspx
- To Run MSAS in passive mode:
http://support.microsoft.com/kb/892375
Alternative Anti-Spyware Applications:
- Spybot Search and Destroy
http://www.majorgeeks.com/download2471.html
- LavaSoft AdAware
http://www.majorgeeks.com/download506.html
- AdAware VX2 Cleaner Plugin
http://www.majorgeeks.com/download4283.html
- BHODemon
http://www.majorgeeks.com/download3550.html
- CWShredder (CoolWWWSearch)
http://www.majorgeeks.com/download3019.html
- PestPatrol
http://www.majorgeeks.com/download1187.html
- Webroot Spysweeper
http://www.majorgeeks.com/download3263.html
- Ewido Security Suite
http://www.ewido.net/en/
- CounterSpy (Same Giant Company Engine as MSAS)
- http://www.sunbelt-software.com
Recommended Software to help protect you:
- Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/default.mspx
- SpywareBlaster
http://www.javacoolsoftware.com
- Outpost Firewall Pro
http://www.agnitum.com/products/outpost
---------------------------------------------
these newsgroups) to Kazaa users who keep all their music files in a folder
under the Kazaa folder.
They may not be completely gone yet - open the quarantine and wait, maybe a
few hours depending on how many files you had. If they appear in the
quarantine, restore them and then move them and then back them up.
I'd tell you to stop using Kazaa too but I 'll let the RIAA do that.
--
If you are under attack and MSAS does not seem to help:
*Submit suspected spyware report in the tools menu of MSAS*
PREP YOUR MACHINE FIRST!
- IF you are using Spybot S/D, UN-Immunize your computer
- IF you are using Adaware, turn off AD-Watch
- Disable all other active anti-spy applications
- Dump all temporary file locations and Internet files
1. Download:
lspfix.exe www.cexx.org/lspfix.htm
winsockxpfix.exe www.snapfiles.com/get/winsockxpfix.html
ccleaner.exe www.ccleaner.com
killbox.exe www.bleepingcomputer.com/files/killbox.php
2. Clean out all temp file locations with ccleaner.exe
3. Install and use killbox to delete stubborn files
4. Reboot into safe mode - http://tinyurl.com/pfca
5. Run MSAS at least twice in full/deep mode
6. Run a robust, updated antivirus software scan
7. Reboot into normal mode,see if problem has been corrected
8. If you think something is there but can't see it, download:
- Blacklight by F-Secure
www.europe.f-secure.com/exclude/blacklight/blbeta.exe
- RootKitRevealer by SysInternals
www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml
9. If your problem is Virus or Security patch related:
In the United States or Canada, call 1-866-PCSAFETY
MS will provide free support for those issues.
Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy
- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
http://support.microsoft.com/kb/811259
LSPFix - www.cexx.org/lspfix.htm
Winsockxpfix - www.snapfiles.com/get/winsockxpfix.html
- Install SpywareBlaster to block malware apps from
installing on your machine. Does not actively run
on your machine, you run it, it makes changes that
protect you.
http://www.javacoolsoftware.com/
- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx
*** For assistance in battling infestations***
- Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
- Save it to C:\hjt (new folder)
- Open it and select "Scan and Save Log"
- Send it to Ron Kinner as an attachment
- Ron's email address is (e-mail address removed)
- Put Hijack in the subject so he knows it's not spam
Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware
4) If that fails, install VB6 runtime files:
http://www.softwarepatch.com/windows/vbrun6download.htm
- To report false positives:
www.microsoft.com/athome/security/spyware/software/isv/fpform.aspx
- To submit disputes or requests:
www.microsoft.com/athome/security/spyware/software/isv/cdform.aspx
- To learn more about how MS analyzes suspected spyware:
www.microsoft.com/athome/security/spyware/software/isv/analysis.mspx
- To Run MSAS in passive mode:
http://support.microsoft.com/kb/892375
Alternative Anti-Spyware Applications:
- Spybot Search and Destroy
http://www.majorgeeks.com/download2471.html
- LavaSoft AdAware
http://www.majorgeeks.com/download506.html
- AdAware VX2 Cleaner Plugin
http://www.majorgeeks.com/download4283.html
- BHODemon
http://www.majorgeeks.com/download3550.html
- CWShredder (CoolWWWSearch)
http://www.majorgeeks.com/download3019.html
- PestPatrol
http://www.majorgeeks.com/download1187.html
- Webroot Spysweeper
http://www.majorgeeks.com/download3263.html
- Ewido Security Suite
http://www.ewido.net/en/
- CounterSpy (Same Giant Company Engine as MSAS)
- http://www.sunbelt-software.com
Recommended Software to help protect you:
- Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/default.mspx
- SpywareBlaster
http://www.javacoolsoftware.com
- Outpost Firewall Pro
http://www.agnitum.com/products/outpost
---------------------------------------------
A
Andre Da Costa
Restoring Quarantined Programs
If you have accidentally quarantined a program, you can
remove it from quarantine and restore it to its original
state.
How to restore a quarantined item
1. From the main screen, or any of the screens with the
toolbar, click Spyware Scan (this is the product icon).
2. On the top right of the screen under the Take me to...
section, select Spyware Quarantine.
3. A list of all items in your quarantine is displayed.
Select the item you would like to un-quarantine and when
the item appears in the right details window, select Un-
quarantine Threat. This restores the item to its original
state before it was quarantined.
4. To un-quarantine multiple items in the quarantine,
select each item and click Un-quarantine All Checked
Threats at the bottom of the screen.
5. After you un-quarantine an item you should restart your
computer to make sure the restored application runs.
Windows AntiSpyware may prompt you to remove some peer-to-peer (P2P) file
sharing programs. If you choose to remove such a program, Microsoft Windows
AntiSpyware deletes the entire contents of the Program Files directory that
relates to the P2P program. Because some P2P programs store downloaded files
in a default directory under Program Files, this might remove all files
downloaded through the file-sharing program. For example, KaZaA stores .exe
and .dll files at C:\Program Files\Kazaa. Downloaded files are stored at
C:\Program Files\Kazaa\My Shared Folder. If you use Windows AntiSpyware to
remove KaZaA, all files and folders under C:\Program Files\Kazaa are
removed. If you have installed any P2P file sharing programs, we recommend
that you make a backup copy of your downloaded files before running Windows
AntiSpyware.
If you have accidentally quarantined a program, you can
remove it from quarantine and restore it to its original
state.
How to restore a quarantined item
1. From the main screen, or any of the screens with the
toolbar, click Spyware Scan (this is the product icon).
2. On the top right of the screen under the Take me to...
section, select Spyware Quarantine.
3. A list of all items in your quarantine is displayed.
Select the item you would like to un-quarantine and when
the item appears in the right details window, select Un-
quarantine Threat. This restores the item to its original
state before it was quarantined.
4. To un-quarantine multiple items in the quarantine,
select each item and click Un-quarantine All Checked
Threats at the bottom of the screen.
5. After you un-quarantine an item you should restart your
computer to make sure the restored application runs.
Windows AntiSpyware may prompt you to remove some peer-to-peer (P2P) file
sharing programs. If you choose to remove such a program, Microsoft Windows
AntiSpyware deletes the entire contents of the Program Files directory that
relates to the P2P program. Because some P2P programs store downloaded files
in a default directory under Program Files, this might remove all files
downloaded through the file-sharing program. For example, KaZaA stores .exe
and .dll files at C:\Program Files\Kazaa. Downloaded files are stored at
C:\Program Files\Kazaa\My Shared Folder. If you use Windows AntiSpyware to
remove KaZaA, all files and folders under C:\Program Files\Kazaa are
removed. If you have installed any P2P file sharing programs, we recommend
that you make a backup copy of your downloaded files before running Windows
AntiSpyware.
R
Richard Urban
You kept the music in your Kazaa shared folder. I can see that from here (-;
When MSAS ran you didn't tell it to "always ignore" the Kazaa exploit it
found. It deleted it all!
--
Regards,
Richard Urban
aka Crusty (-: Old B@stard
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!
When MSAS ran you didn't tell it to "always ignore" the Kazaa exploit it
found. It deleted it all!
--
Regards,
Richard Urban
aka Crusty (-: Old B@stard
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!