Spyware/adware

[Guest]

I have a windows XP PC infected with spyware ( Instant access dailer, egroup
adware, egroup dailer) I've installed windows antispyware Beta which detects
them & removes them I've also installed SP2 & all the latest security
patches form the microsoft site, but everytime I connect to the internet they
come back.

Is ther a way that I can stop them comming back or are they not being
proberly removed with the anitspyware please help.

I thought SP2 & the security patched would stop them being installed without
your knowledege

 

[Bert Kinney]

Hi,

In addition to running the antispyware beta look here.
Virus and Spyware removal:
http://home.earthlink.net/~mvp_bert/html/spyware.html

 

[David H. Lipman]

| I have a windows XP PC infected with spyware ( Instant access dailer, egroup
| adware, egroup dailer) I've installed windows antispyware Beta which detects
| them & removes them I've also installed SP2 & all the latest security
| patches form the microsoft site, but everytime I connect to the internet they
| come back.
|
| Is ther a way that I can stop them comming back or are they not being
| proberly removed with the anitspyware please help.
|
| I thought SP2 & the security patched would stop them being installed without
| your knowledege



Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt472.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point

* * Please report your results ! * *

 

[Gerry Cornell]

What Firewall are you using?

Is MSAS loading when the machine boots? Have you enabled Real Time
protection in MSAS?

Can you put a name to some of the bugs, which are returning?

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

The Firewall that comes with SP2
How do you enable real time protection?
the names of the spyware are the same as I what I've just removed, the same
ones all the time.

MSAS?

 

[Gerry Cornell]

Select Options, Settings and Real-Time Protection and check the boxes
before the first two items.

Please give the names of the spyware , which are returning after
removal.

MSAS = Microsoft Anti-Spyware.


--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Spyware Names

Instant Access Dialer
egroup adware
egroup Dialer

 

[Guest]

SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html

 

[Gerry Cornell]

Annoyed

Advice for Instant Access Dialer
http://www.kephyr.com/spywarescanner/library/instantaccessdialer/index.phtml

Advice on egroup
http://www.securemost.com/articles/rm_egroup.htm

As this is a Beta product if you encounter problems Microsoft would like
you to report problems you encounter whilst using the software? Have
you? You can get help through the private newsgroups. This is a public
newsgroup.

In Microsoft Anti-Spyware click on Help and the second item is a link to
the newsgroups.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Thanks for the info I have mamaged to rid the PC of the spyware last night I
used a combination of Microsoft antispyware & lavasoft adware SE in safe mode
I had to use both anti spyware products as the both detected different things.

 

[Guest]

Thanks for the help...I had to use both anti spyware products (lavasoft
adware SE & Microsoft Anit spyware) as one wouldn't detect what the other one
could & also when booting into safe made you have the choice of either
administrator or user profile, you have to run the anti spyware on both
profiles to totally clean the PC.

 

[Gerry Cornell]

"I had to use both anti spyware products as the both detected different
things." That's not unusual.

Dump the old System Restore Points otherwise you could bring the "bugs"
back.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Had already done that

Thanks

"I had to use both anti spyware products as the both detected different
things." That's not unusual.

Dump the old System Restore Points otherwise you could bring the "bugs"
back.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[Guest]

Had already done that

Thanks

"I had to use both anti spyware products as the both detected different
things." That's not unusual.

Dump the old System Restore Points otherwise you could bring the "bugs"
back.

--


Hope this helps.

Gerry
~~~~~~~~~~~~~~~~~~~~~~~~
FCA

Using invalid email address

Stourport, Worcs, England
Enquire, plan and execute.
~~~~~~~~~~~~~~~~~~~~~~~~
Please tell the newsgroup how any
suggested solution worked for you.



~~~~~~~~~~~~~~~~~~~~~~~~

 

[BBUNNY]

Annoyed wrote:
| The Firewall that comes with SP2
| How do you enable real time protection?
| the names of the spyware are the same as I what I've just removed,
| the same ones all the time.
|
||| I thought SP2 & the security patched would stop them being installed
||| without
||| your knowledege

Those things are propably spawning on you. Did you follow the course
of action suggested by David H. Lipman???????