Do you need HELP with SPYWARE?

[Ron Kinner [MVP]]

This is a repost. I've been told that one of the URLs I
give wraps and won't open so this is an improved version:

Rather than chase through all of these posts I'm just
going to post this here. If you have spyware that AntiSpy
can't get rid of and you would like some free advice from
a veteran of the spyware wars then get HijackThis from

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

If the above wraps and won't open then use:

http://tinyurl.com/67reb

Save it (preferably to its own folder) then Open it and
select the SCAN AND SAVE LOG option.

Note where you save the log and then send it to me as an
attachment with a short note about your problem. Put
HijackThis in the subject so I will know it's not spam. I
will be glad to look at it and tell you what to do to get
rid of it for good.

Why am I doing this? I work as a Network Engineer but
unless there is a problem I have nothing to do and I'm
bored to death and besides I hate spyware. If you are
worried that I might be a scam artist you can check out my
profile on the HP forum:

http://forums.itrc.hp.com/cm/UserProfile/1,,CA655597!
1,00.html

If the above wraps and won't open then use:

http://tinyurl.com/6lhd4

Ron Kinner MVP

(e-mail address removed)
..

 

[Guest]

McaFee detected this download as a virus.

W32/Generic.worm!p2p

 

[Bill Sanderson]

Which link? The executable, or the forum?

I've just downloaded the executable, and tested it with F-secure 2005 with
current definitions, and it comes through clean.

If you still have the download, please submit it here for an alternative set
of opinions:

http://www.virustotal.com
http://virusscan.jotti.org

 

[RichardF]

A link you may want to offer for users seeking help in
removing spyware is this
http://www.liutilities.com/products/wintaskspro/processlibrary/

While not a complete listing, it does give some detailed
information regarding which processes are running on your
machine and what those processes are for as well as their
security risk.

 

[Sandi Hardmeier]

Personally, I feel uncomfortable about HJT logs being sent, and analysed and
advice given off forum where other eyes cannot vet said advice and check for
error ( The entire point of newsgroups is that the discussion is public
and advice available, and therefore to benefit of, all. If you're bored
Ron, the aumha.org HJT forums always appreciate more hands on deck.

 

[JRosenfeld]

McAfee was reporting HJT, False vpositive. Latest update
to McAfee has fixed it. See

http://forums.spywareinfo.com/index.php?showtopic=41430

 

[Ron Kinner]

Sandi,

Due to the company firewall I can only access these forums
via a web browser. When I do that there is no opportunity
to attach or read attachments (if such a capability
exists). Also because of the primitive way this forum is
set up new replies do not show up on the front page but
are threaded under the original post so the only way I
have to see replies is to search through all 19 (Currently
that's the number) pages for just this news group and that
still leaves the other 6 antispy newsgroups. I waste too
much time doing that when I could be helping people.
Improve this forum and I will be glad to refrain from
doing stuff offline. If you want to see an example of
what a forum should be then look at HP's ITRC.
http://forums.itrc.hp.com/cm/

If you do go there you will note that I am #24 on the all
time list of posters so I am not some evil person preying
on ignorant people.

I'm sorry you do not approve of doing stuff offline but
considering the number of people who write to me each day,
if I were hurting people's systems you would hear about it
by now. Please note that I am using my own Email address
here and not a yahoo or hotmail address. Shall I ask some
of the people I've helped to post here with their opinions
of my work? Would that help?

Ron