Spyware

[Guest]

I have a friend that got infected by 2 spyware's.
1) Aqware mem_watcher, I could not find any solutions on the web for this.
2) Tspy-small

I have tried to run MS malware removal tool in safe mode and it does not
find anything, I have tried to run Win defender in safe mode nothing.
I have tried sysclean & nothing, I have tried stopzilla & nothing, I have
done an online scan in safe mode w/ net support & nothing.

I can not run a scan in standard mode because it reboots the system. She
runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and
real time protection in order for the system not to reboot.

Any suggestions?

I was thinking about unplugging the drive and installing it into another
system and running a scan from the uninfected unit.

TIA

 

[Elmo]

I have a friend that got infected by 2 spywares.
1) Aqware mem_watcher, I could not find any solutions on the web for this.
2) Tspy-small

I have tried to run MS malware removal tool in safe mode and it does not
find anything, I have tried to run Win defender in safe mode nothing.
I have tried sysclean & nothing, I have tried stopzilla & nothing, I have
done an online scan in safe mode w/ net support & nothing.

I can not run a scan in standard mode because it reboots the system. She
runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and
real time protection in order for the system not to reboot.

Any suggestions?

I was thinking about unplugging the drive and installing it into another
system and running a scan from the uninfected unit.

TIA

That could work.. You could also install the free Avast! which has a
bootscan. The bootscan will run before Windows starts, so most malware
can't get control of it. Whether Avast! will find that spyware, I'm not
certain; it does some spyware along with viruses and the like.

 

[Guest]

Thanks for that thought, What I tried to do was I put in my NIS 2007 CD and
booted from it which checks the memory and it found nothing, in regards to
AVG can it run under save mode? I can not run any app under normal mode it
reboots.

Thanks

 

[Poprivet]

I have a friend that got infected by 2 spyware's.
1) Aqware mem_watcher, I could not find any solutions on the web for
this. 2) Tspy-small

I have tried to run MS malware removal tool in safe mode and it does
not find anything, I have tried to run Win defender in safe mode
nothing.
I have tried sysclean & nothing, I have tried stopzilla & nothing, I
have done an online scan in safe mode w/ net support & nothing.

I can not run a scan in standard mode because it reboots the system.
She runs Trend Micros PC-Cillin 2007. I have to disable the spyware
scanner and real time protection in order for the system not to
reboot.

Any suggestions?

I was thinking about unplugging the drive and installing it into
another system and running a scan from the uninfected unit.

TIA

I wouldn't do that, unless you KNOW the other machine can and will
prevent/remove the malware, or that it won't propogate into the new machine!
You may end up with two infected machines if you're not careful.

Pop`

 

[Elmo]

Thanks for that thought, What I tried to do was I put in my NIS 2007 CD and
booted from it which checks the memory and it found nothing, in regards to
AVG can it run under save mode? I can not run any app under normal mode it
reboots.

Thanks

Avast will install under Safe Mode. I don't remember if AVG will.

 

[Kelly]

Sypware Cleaners that WORK!

Line 393 - Right Hand Side: http://www.kellys-korner-xp.com/xp_tweaks.htm

Or see: http://www.kellys-korner-xp.com/xp_s.htm#spy

*Note: Update all (except HijackThis) before using.



--

All the Best,
Kelly (MS-MVP/DTS&XP)

Taskbar Repair Tool Plus!
http://www.kellys-korner-xp.com/taskbarplus!.htm

New- SupportSpace
http://www.kellys-korner-xp.com/supportspace.htm

 

[Guest]

Good thought.

I wouldn't do that, unless you KNOW the other machine can and will
prevent/remove the malware, or that it won't propogate into the new machine!
You may end up with two infected machines if you're not careful.

Pop`

 

[Guest]

Thanks kelly, MS antispyware does not exist anymore it is now windows
defender, and I have tried spybot to no avail. I will try this other before
formating and yes I will write 0000000000's to it.

Thanks

 

[PA Bear]

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

 

[Guest]

I have a friend that got infected by 2 spyware's.
1) Aqware mem_watcher, I could not find any solutions on the web for this.
2) Tspy-small

I have tried to run MS malware removal tool in safe mode and it does not
find anything, I have tried to run Win defender in safe mode nothing.
I have tried sysclean & nothing, I have tried stopzilla & nothing, I have
done an online scan in safe mode w/ net support & nothing.

I can not run a scan in standard mode because it reboots the system. She
runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and
real time protection in order for the system not to reboot.

Any suggestions?

I was thinking about unplugging the drive and installing it into another
system and running a scan from the uninfected unit.

TIA

Hi Steve,
I think you have both a Trojans and Keyloger, it is difficult for the
memwatch on how to Categories it as, because the behaviour of that Malicious
program can change from one shape to another most AV vendors will list it as
Trojans.
Solutions;
Try to paralyses the running processes for both these programs by following
the instructions here:
Win32/Memwatch Family
http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=41597
Tspy:
http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453098011

Also I will run the hijackthis to completely remove any residues left behind
can resurrect the Monster back and you know when the Mummy return??.
HTH.
nass

 

[Guest]

I can not thank everyone enough for their suggestions and help, it is just
that the person responsable for this system is doing a LLF (FKA) today, and
is going to re-install all pgms and updates.

Thanks again

 

[callum.macraild]

Hi.

I recently had many problems with spyware and i spent over $200 buying
antispyware programmes that promised the earth and didn't deliver.
Then when i thought nothing would work i came accross a website
http://www.antispywaresolutions.com & i downloaded the ParetoLogic
Anti-Spyware and i have never had any problems with spyware since, it
removed everything the others didn't.

I hope this helps anyone else who has problems with spyware.

Thanks.

 

[PA Bear]

SPAM

Hi.

I recently had many problems with spyware and i spent over $200 buying
antispyware programmes that promised the earth and didn't deliver.
Then when i thought nothing would work i came accross a website
hXXp://www.antispywaresolutions.com & i downloaded the ParetoLogic
Anti-Spyware and i have never had any problems with spyware since, it
removed everything the others didn't.

I hope this helps anyone else who has problems with spyware.

Thanks.