spyware proxy removal problem

[Guest]

Hi, my wife installed some software on my Windows xp machine and it contained some spyware stuff. I uninstalled the software, and ran both Adaware, and spybot and they indicated removal of the items. However, I get two issues. There is a netsetter registry entry that recreates itself after reboot of the machine, and in the Lan settings, in the address line, a reference to www.compete.com/pane...... When I remove this reference, I loose internet access, until I restart IE, but once IE restarts, that reference is back as well. I am fairly knowledgable in computers, and am having trouble resolving this. The netsetter is picked up by adaware every time its run after a reboot but I"m not sure if its doing anything else. When I remove the reference for the compete.com, and then try to browse the web, I get the "detecting proxy settings" message, then an error message in reference to cannot find yada yada yada.. These both are data harvesting items (not sure they're related, don't think so) which I want to get removed. I'm running WinXP Pro, and IE6 with all the latest updates. Please help! Need advise/ideas on how to remove these 2 items permanently and still have internet access. I'm also using a broadband cable connection if that helps. Currently at work, but will be monitoring this today. If you need specific info, I can try to get it, or it will have to wait until my return home this afternoon. Thanks for any and all help in advance

Jaso

 

[Chuck]

Hi, my wife installed some software on my Windows xp machine and it contained some spyware stuff. I uninstalled the software, and ran both Adaware, and spybot and they indicated removal of the items. However, I get two issues. There is a netsetter registry entry that recreates itself after reboot of the machine, and in the Lan settings, in the address line, a reference to www.compete.com/pane...... When I remove this reference, I loose internet access, until I restart IE, but once IE restarts, that reference is back as well. I am fairly knowledgable in computers, and am having trouble resolving this. The netsetter is picked up by adaware every time its run after a reboot but I"m not sure if its doing anything else. When I remove the reference for the compete.com, and then try to browse the web, I get the "detecting proxy settings" message, then an error message in reference to cannot find yada yada yada.. These both are data harvesting items (not sure they're related, don't
think so) which I want to get removed. I'm running WinXP Pro, and IE6 with all the latest updates. Please help! Need advise/ideas on how to remove these 2 items permanently and still have internet access. I'm also using a broadband cable connection if that helps. Currently at work, but will be monitoring this today. If you need specific info, I can try to get it, or it will have to wait until my return home this afternoon. Thanks for any and all help in advance!

Jason

Jason,

Start by downloading LSP-Fix from <http://www.cexx.org/lspfix.htm>,
and CWShredder <http://www.majorgeeks.com/download4086.html>.

First, run CWShredder.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?lang=en&page=download>, both of
which are free and very trusted crapware detectors and removers.
1) Install and run Spybot. First update it ("Search for updates"),
then run a scan ("Check for problems"). Trust Spybot, and make all
recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately.
3) Have your HJT log interpreted by experts at one or more of the
following forums (and post it here):
<http://forums.tomcoyote.org/>
<http://63.247.79.145/~coyote/forums/index.php?act=idx>
<http://www.wilderssecurity.com/index.php?board=17>
<http://forums.net-integration.net/index.php?s=8a1e9d7c1978cff54ca06a3210c7c1b0&showforum=32>
<http://www.spywareinfo.com/forums/index.php?s=68ddc23721b063d5411ece09e5ac93f9&showforum=11>
(The latter may or may not respond for you as I have read reports that
the SWI site is currently under DoS attack). All of these forums
appear to be rather busy right now, so be patient.

If removal of any of the spyware affects your ability to access the
internet (some spyware builds itself into the network software, and
removal may damage your network), run LSP-Fix.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Hi

Right click My Computer/properties/System Restore, check the box "Turn off System Restore on all drives" and then reboot
It will cleared all the restore points

Run Ad-aware again
First, update all the components by clicking the "check for update now" button
After the update is finish, click the start button and select customize. Check all the boxes under Memory and Registry
Select to scan all the drives, except the removeable drives. Then click proceed/Next

After Ad-aware finished running and deleted all the spywares, re-enable the restore features
If still no avail, I don't know what to do except format the HDD and then clean install XP again

Pete


----- TFD2001 wrote: ----

Hi, my wife installed some software on my Windows xp machine and it contained some spyware stuff. I uninstalled the software, and ran both Adaware, and spybot and they indicated removal of the items. However, I get two issues. There is a netsetter registry entry that recreates itself after reboot of the machine, and in the Lan settings, in the address line, a reference to www.compete.com/pane...... When I remove this reference, I loose internet access, until I restart IE, but once IE restarts, that reference is back as well. I am fairly knowledgable in computers, and am having trouble resolving this. The netsetter is picked up by adaware every time its run after a reboot but I"m not sure if its doing anything else. When I remove the reference for the compete.com, and then try to browse the web, I get the "detecting proxy settings" message, then an error message in reference to cannot find yada yada yada.. These both are data harvesting items (not sure they're related, don't think so) which I want to get removed. I'm running WinXP Pro, and IE6 with all the latest updates. Please help! Need advise/ideas on how to remove these 2 items permanently and still have internet access. I'm also using a broadband cable connection if that helps. Currently at work, but will be monitoring this today. If you need specific info, I can try to get it, or it will have to wait until my return home this afternoon. Thanks for any and all help in advance

Jaso

 

[Guest]

Chuck, thanks, I have ran all that you described except the LSP-Fix, CWShredder, or hijack this. Will give those a try this afternoon. Thanks

Jason

 

[Mad Max]

Chuck,
both SWI and Tom Coyote are currently down. For one on one assistance and
most , if not all , the programs recommended are available at the following
link.
http://forums.net-integration.net/
Maybe this will keep you from having to do too much surfing.

Mad Max

contained some spyware stuff. I uninstalled the software, and ran both
Adaware, and spybot and they indicated removal of the items. However, I get
two issues. There is a netsetter registry entry that recreates itself after
reboot of the machine, and in the Lan settings, in the address line, a
reference to www.compete.com/pane...... When I remove this reference, I
loose internet access, until I restart IE, but once IE restarts, that
reference is back as well. I am fairly knowledgable in computers, and am
having trouble resolving this. The netsetter is picked up by adaware every
time its run after a reboot but I"m not sure if its doing anything else.
When I remove the reference for the compete.com, and then try to browse the
web, I get the "detecting proxy settings" message, then an error message in
reference to cannot find yada yada yada.. These both are data harvesting
items (not sure they're related, don'twith all the latest updates. Please help! Need advise/ideas on how to
remove these 2 items permanently and still have internet access. I'm also
using a broadband cable connection if that helps. Currently at work, but
will be monitoring this today. If you need specific info, I can try to get
it, or it will have to wait until my return home this afternoon. Thanks for
any and all help in advance!