More spyware

[Chewbacca]

Cerek,

Rest mostly well assured that Avast will stop things like this from happening again. It's realtime scanner works great -VS- Virus and Malware. I wont say your are gauranteed set for life and Avast wont stop less insidious adware and tracking stuff. An anti-spyware program like SpyWweeper offers additional real time scanning and excellent removal... so I hear. I mention this more further down this post.

I would get ZoneAlarm ASAP to stop any already existing buggers from sending information out.

For a small fee I hear and have read that Webroots SpySweeper is the best anti-spyware. I plan on picking it up soon and I have seen it recently at Best Buy, Staples, and Circuit City for only 20 bucks. PC magazine gave it editor's choice. Obviously it is not perfect, but no AntiSpywar software is!

PC Mag review

excerpt from review:

The best just keeps getting better. Webroot's Spy Sweeper 3.5, which once shared the spotlight with Lavasoft's Ad-aware SE Plus, is now the sole champ of the antispyware arena. The latest version, with its slight but effective improvements, is easily the best choice for protecting PCs from spyware and for cleaning machines that are already infected. Scan time is improved in the new version. Because it was revised during our test cycle, we were able to run both versions 3.0 and 3.5 on the same test system, and we verified that Spy Sweeper 3.5 is approximately 30 percent faster, in line with Webroot's claims. Accuracy is up as well; the program got perfect scores on all but one of our tests. Other improvements include the ability to remove both CoolWebSearch and TV Media completely. We found one pest that remains less than fully curable by Spy Sweeper's means, however. The program was unable to delete a key component of Istbar, although it did block the spyware bar from working. Spy Sweeper wrongly suggests that a user can delete the file; Windows claims Istbar is in use, making deletion via Windows Explorer impossible. You need to kill Istbar either via a command line, by removing dependencies on the file, or with Spybot Search & Destroy. Even the best occasionally needs a little help. Of course, with all its Shields active, Spy Sweeper will prevent Istbar and almost every other pest from getting on your system in the first place. If version 3.0 got on your nerves with frequent requests for user interaction, you'll like 3.5's ability to block browser-hijack attempts without asking for advice.

Good Luck! [img]smile.gif[/img]

[ 02-19-2005, 10:06 PM: Message edited by: Chewbacca ]

[Chewbacca]

Originally posted by Cerek: These last two were recommended by the site I found with instructions on how to remove "about:blank". The Adware Away is supposed to remove "about:blank" and several other ultra-nasty hijackers and trojans that other software can't - but that hasn't been my experience. It seems to be a fairly comprehensive program and gives a menu choice of removing hijackers, spyware, adaware, or trojans. I can also scan the PC and send them a log of what shows up and they will provide a "custom cleanser" - but that sounds pretty "fishy" to me. In fact, I'm beginning to wonder if Adware Away might not be one of the sponsers of "about:blank" or "CoolWebSearch". That is the part that makes me the angriest - is that this hijacker recommends it's own spyware removal packages. These JERKS have the gall to infest my computer, then turn around and offer me spyware removal packages. Wish there was a way to send them a nice letter-bomb instead.

I am suspicious as well. There is alot of crappy fake software out there that does exactly this. These worthless hunks of code may have a smooth presentation, but its bullcrap and worst on the inside.

One thing that makes me particularly suspicous is the name "Adware Away" Sounds like they are counting on the name recognizion of the reputable "Ad-aware" to fool people.

Stick to big name reputable freeware in the anti-spyware arena and use google to thoroughly reveiw any new freeware that comes your way.

[ 02-19-2005, 10:04 PM: Message edited by: Chewbacca ]

[Bungleau]

Cerek -- PM me with a good email and I'll send you Popup Killer. It's really handy for getting rid of browser windows without having to touch them. And it can generally kill them by title or URL -- quite handy, actually. It won't fix the rest of it, but it may help you get those annoying windows out of the way.

[shamrock_uk]

I just wanted to clarify that the Service Pack 2 firewall will not protect you - it still allows outgoing connections, simply blocks port scanning and programmes connecting in. One of the most common ways for your computer to be infected is a worm running on your computer that connects outside to download a virus. Change it! Either Zone Alarm or Kerio spring to mind.

You also need to change your browser. Really. Either Firefox or Opera, they're both ultra-secure compared to Internet Explorer. All your problems will go away once you switch...

If you're going to pay for a virus checker, get NOD32 - I understand its the only one never to have failed a VB100% test. If you want a free one then you can't go wrong with either Avast! or AVG.

By staying with Internet Explorer you're fighting an uphill battle - everytime you clean your computer, more crap will get dumped on. You need to make a clean break and switch.

I don't have time to write out all the links for those programmes, but they're all listed in the website in my sig.

Oh, and "about:blank" is simply Internet Explorer's way of telling you that it has no homepage set - this is what I have mine on and it is not a problem and not caused by spyware. Its when your homepage is set to www.buy_viagra_here.com that you have to worry

[ 02-20-2005, 06:05 AM: Message edited by: shamrock_uk ]

[VulcanRider]

Microsoft is giving away free downloads of their new antispyware cleaner. It's free thru July 31. But right now it might help. The friend who told me about it said it found things Ad-aware had missed.

[Felix The Assassin]

Cerek, buddy. Get off the net, and rebuild your pc!

Asking for info. How long were you on the net 'un-protected' before you got hit?

Another forum I frequent is trying to say less than 5 minutes.

In the future. Use the other non targeted web browser, Firefox, or full blown Mozilla. Get yourself a free (insert zone alarm) firewall. If you work for a good intentions employer that has pc's on the net, ask for the employee take home firewall/anti-v software.

In my experience, I have seen this exact same situation you describe, except Norton firewall popped-up with "Immediate Alert, Malware intrusion, shutting down ALL Comm ports". All comm ports were then shut down, and nothing else was allowed, and the malware was left open to be DELETED, without any futher mess.

Moral of the story, If you run windows, and internet exploder, without a firewall, YOU will be infested!

Sadly, you are so far beyond, your only recourse is to save whatever you think is importatnt, and re-format 3 times prior to installing a brand new fresh install of your OS. 3 times re-format is minimal, 5-7 is better, best yet would be to buy a new HDD, and take a hammer to the other one.

In lab results, a HDD has been brought back to boot, and file restoration, after the owner formatted it once. So, if you think a one time is sufficient, remember what you just experienced.

Now; your registry is where your main infestation is harboring it's next assualt. From the registry malware can piggyback an IE string and dispatch all of your personal information back to the malware site. This may or may not happen based upon what you have been hit with.

[LennonCook]

Originally posted by Felix The Assassin: In the future. Use the other non targeted web browser, Firefox, or full blown Mozilla

Non-targeted? Perhaps. But that isn't why it's safer. Firefox, et al, are safer simply because they purposely dissallow a few key problematic things: ActiveX, remote webpages accessing local files, *anything* accessing the browser itself, popups/unders... all of those things that let spyware install itself. Meaning that even if they end up targeted (which may or may not happen depending on what it takes to become so), they will *still* hinder the spread of Bad Stuff^TM.

The same applies to using alternatives to Outlook/Outlook Express. Active Scripting = email attachments can be run without your permission or knowledge, thus installing Bad Stuff^TM onto your system. Use alternatives (which purposely don't use Active Scripting), and you'll need to run the apps yourself (manually) to have anything happen. Which takes it all back to matters of common sense.