Spyware Beta problem

[Abe Wagner]

I have had some truly nasty spyware invade my system and
keeps hijacking the browser and changing it to
daosearch.com. I have run the Beta software a dozen
times, using every possible option and the hijacker keeps
coming back and taking over. I have also tried
Lavasoft's Adware and Norton anti-virus, all of them a
number of times, and none seem to get rid of the
problem. I have also searched the system (XP) for any
files with possible names or text, and pulled anything
that seemed likely. Still can't get this fixed.
Anybody have any ideas. Clearly the MS beta product
hasn't got it yet...

 

[Mikolaj]

I have had some truly nasty spyware invade my system and
keeps hijacking the browser and changing it to
daosearch.com. I have run the Beta software a dozen
times, using every possible option and the hijacker keeps
coming back and taking over. I have also tried
Lavasoft's Adware and Norton anti-virus, all of them a
number of times, and none seem to get rid of the
problem. I have also searched the system (XP) for any
files with possible names or text, and pulled anything
that seemed likely. Still can't get this fixed.
Anybody have any ideas. Clearly the MS beta product
hasn't got it yet...

Do you have firewall on your system? If not - than use it.
And start in Safe mode and run system scanning again. Also try other
"cleaning"
software:

McAfee Stinger http://vil.nai.com/vil/stinger/
Spybot Search&Destroy http://www.majorgeeks.com/download2471.html
HijackThis http://www.majorgeeks.com/download3155.html
CWShredder http://www.majorgeeks.com/download3019.html
Ad-Aware SE Personal http://www.lavasoft.com/software/adaware/

Kind regards
Mikolaj Kaminski
MS-MVP, Poland

 

[Engel]

Get HijackThis from

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

and let it Scan your system and Save Log. (Save it where
you can find it again.) then send the log to:

Ron Kinner
(e-mail address removed)

He will tell you what to do next. Put Hijack in the
subject so he will know it's not spam.

This tutorial is very informati
http://www.spywareinfo.com/~merijn/htlogtutorial.html#o8

Good luck

Engel
--Original Message-----

 

[Paul]

I have had the same experience, I have used AD Aware SE,
SpyBot Search and Destroy, Bell Sympatico Freedom
Antivirus amd Adware. All seem to have no problem finding
the same viruses and spyware, including Microsft's Anti-
Spyware. And none can seem to get rid of any of the
viruses, as many times as I run one of these applications
the next time through they find the same viruses and
spyware I just thought I had deleted.

Paul M

 

[Bill Sanderson]

The advice to do full, deep scans in safe mode isn't just a
fallback--there's a significant rate of success. If the stuff still comes
back after such a scan, check out HijackThis and a specialized forum where
you can get expert cleaning advice. If you have something Microsoft
Antispyware and your antivirus can't manage, you need direct help.

 

[Mikolaj]

I have had the same experience, I have used AD Aware SE,

SpyBot Search and Destroy, Bell Sympatico Freedom
Antivirus amd Adware. All seem to have no problem finding
the same viruses and spyware, including Microsft's Anti-
Spyware. And none can seem to get rid of any of the
viruses, as many times as I run one of these applications
the next time through they find the same viruses and
spyware I just thought I had deleted.

Well, it looks like the situation, where someone all the time cleans up the
mess left in the house by the thieves, but still leaves the door (or should
I say - windows ;-) ) open..

I think there are two possibilities
- your system is somehow not protected from unauthorized acccess,
- you have in the system something that is called rootkit that hides
something that continuously installs spyware and/or something worse into
your system - try to check with this software
http://www.sysinternals.com/ntw2k/freeware/rootkitreveal.shtml