Title: I got spyware and adware...
Description: ...HTF do you get rid of it?
atariangamer - December 27, 2007 07:13 PM (GMT)
Alright, techies, I need some help pronto! My sister uses the computer I'm currently using to post right now, and before she left this morning she said it was acting weird. She hangs around myspace and all the IMs. She has downloaded YIM and MIM (myspace im). Nothing was the problem till she couldn't close one of the popups that slipped past the blocker. It was advertising a spyware\hacker\security\virus\adware blocker and scanner called something like divo or some word with 'D' at the front. She couldn't close it, so she turned the 'net off. The popup went away. Since then, everyone's background says "Warning: Spyware Threat Detected on PC!" plus a bunch of junk saying like "your IP address is 207.456.32.453 and it has been hacked and sent to millions around the world. scan now to delete the spyware doing this." but that isn't my IP address, and the only spyware and adware on my pc right now is this software's adds! Every few seconds, a yellow exclamation point pops up in my system tray saying random things about spyware and scan now. When you click scan now, a page comes up. The first thing on the title bar was "C:\windows\system32\drivers\pt.dll" then it starts an ad. I deleted that, then another thing came up looking like the windows security center saying there was a trojan in C:\program files\....hold on, one just popped up now. It says windows security alert, and looks like the one that usualy comes up, but when I click on it, it takes me to an error, saying C:\windows\system32\drivers\pt.dll can't be found. anyway...program files\aggon or something, but it doesn't exist! My virus software got some of it gone except this, my task manager won't come up, saying its been blocked by the admin...but I am the admin. I can't system restore, It won't let me change certian settings, I can't use run, search, or most of the start menu. I tried updating my virus software, since the last one was in 2006, but it can't get the spyware definiton file. AVG free keeps conking out when I download it, and microsoft security center doesn't have a scanner. I've downloaded more on my own computer from sites that are crawling with virusus and ads and spyware links than she probably even knows about, but mine still is running fine. Please help me. I got to get this off, and If I can do it before 5:30 Eastern, I'll be okay, but after, there's a big danger of trouble with parents...
slimeinator - December 27, 2007 07:24 PM (GMT)
That's terrible!
You can use Adaware 2007 Free Version to get rid of all this nasty stuff. It REALLY worked for me.
This is its website:
http://www.lavasoftusa.com/DON'T CLICK ON THOSE SCAN THINGS IN THE ADS!!! They are COMPLETELY fake and will SELL information about you to adware companies, who will install adware on your computer without your consent, which will make the problem WORSE!!!!
I hope I helped!
atariangamer - December 27, 2007 07:34 PM (GMT)
thanks, but remember what I said about the net conking out? It doesn't get very far before the load stops....I'm using wyzo, a browser that stops most popups, scans most download content, and alerts to unsecured sites. The probably worst thing, is I'm using an unsecured wireless network. Urgh! The download keeps dying at 7 percent! Wait, I think I have some other software here. Keep posting while I try this.
slimeinator - December 27, 2007 07:37 PM (GMT)
What kind of software? Windows Defender? Spybot Search and Destroy?
atariangamer - December 27, 2007 07:47 PM (GMT)
No...a 2003 software called "webroot Spy Sweeper". Since my last post, with out a asingle update its found 26 bugged softwares adn 306 traces, including Adwares, Cookies, Trojans, and a Keylogger. Wow.
slimeinator - December 27, 2007 07:51 PM (GMT)
"Wow" indeed. That's a LOT of stuff for just one computer. Let's see...
Trojans are viruses that come with downloaded programs, and are installed surreptitiously when the installer package that is used to acquire the program is run, giving it the name "Trojan."
Adware (if you didn't already know) is what is making the popups and advertisements appear on your screen.
Cookies fall under the category "Spyware" occasionally, and are used to sell your information to adware corporations, who will then install adware on your computer. You pick up cookies by
1. Having your "defenses" lowered (Privacy options are too low)
2. Visiting a website that saves cookies onto your computer
3. Not getting rid of them later.
Cookies can also be benovolant, like the ones this board saves that keep track of whether or not you want to auto-login, or the skin you want to use for your browsing session, or your avatar.
Key loggers are used to obtain passwords for accounts, such as your computer password, or the password you use to log into Myspace, or the Cquest Fan Forums.
DELETE ON SIGHT!
Quarkz - December 27, 2007 08:01 PM (GMT)
ok, i use Ad Aware, spybot, Spyware Doctor (free version), and CA anti virus (paid).
get the first three (they're free), install them and make sure they are all up to date. then disconnect the interwebz, shut down the comp, and the reboot in safe mode. run adaware and spybot, they both pretty much tell you waht to do. voila- infectin purged and your comp is protected.
http://www.lavasoftusa.com/http://spywarebot.com/?hop=advanced99&p=3&gid=1072645447&http://www.pctools.com/anti-virus/?ref=afl_onenetwork
atariangamer - December 27, 2007 08:12 PM (GMT)
whoo. Just downloaded spywarebot and updated my spysweeper. they both are picking up the same number as last time. Only this time, that was in the first miniute. The others are just too large to download with out a mess up. the net drops when I try. I'll keep trying, but already it looks bad.
slimeinator - December 27, 2007 08:18 PM (GMT)
Spybot's a good one. :approve: You can even immunize your computer from further threats after you finish scanning.
atariangamer - December 27, 2007 08:25 PM (GMT)
Guys?...I just found a text document in a folder called 'acoona', mensioned in my spyware report as a keylogger. The document was called 'logkey' and contained random words I typed since I logged on this morning...o boy.
slimeinator - December 27, 2007 08:27 PM (GMT)
MY LORD!!!!!!!!!!!!!!!!!!!!!!!!!!! DELETE IT!!!!!!! The file has likely already been e-mailed to some third party, and they WILL use it for malevolant purposes. My suggestion:
Delete it, and change your passwords.
Quarkz - December 27, 2007 08:32 PM (GMT)
| QUOTE (atariangamer @ Dec 27 2007, 04:25 PM) |
| Guys?...I just found a text document in a folder called 'acoona', mensioned in my spyware report as a keylogger. The document was called 'logkey' and contained random words I typed since I logged on this morning...o boy. |
there is a key logger on your computer- you need to do some serious full system scans, and delete the document (make sure you have disconnected the phone or ethernet or usb line from your comp so thereis now possible way you are on the internet when doing the scans)
atariangamer - December 27, 2007 08:41 PM (GMT)
the document is gone, the files deleted, and the scans are nearly done. I found the ad spamming adware remover, DIOCLEANER, and deleted as many files connected to it as possible, but the fake security threats, the background, and annoying system tray popups keep coming, but they don't link to the webpage anymore...strangely enough, all the weird folders that weren't there but had spyware in them, they just popped up. along with some shopping helpers, a web toolbar, and the keylogger folder. weird stuff...
atariangamer - December 27, 2007 08:43 PM (GMT)
QUARKZ!?!?! You would give me a software that scanned the pc, THEN asked you to pay money to register. Sorry, but its almost 4, and its not fixed. gotta keep trying. Gonna do a manual delete. Or try to any way.
Lucius Octavion - December 27, 2007 08:56 PM (GMT)
Sounds like something got put in your registry...
atariangamer - December 27, 2007 08:59 PM (GMT)
does that have anything to do with stuff I delete that keeps coming back? I've deleted acoona 12 times in the past miniute and it keeps coming back!
How do I clean my registry?
Lucius Octavion - December 27, 2007 09:05 PM (GMT)
atariangamer - December 27, 2007 09:36 PM (GMT)
trying...
Does anyone know a place where I can talk to a person via chat? I need some serious help...
atariangamer - December 27, 2007 09:45 PM (GMT)
huh...I just tried that thing, then deleted the junk with spy sweeper, and stuff that was reaperaring isn't any more. Could my problem be fixed? That evil system tray popup doesn't reapear...could I be rid of it? If I am, I'm gonna be so angry at my sis....
Quarkz - December 27, 2007 10:03 PM (GMT)
Spyware doctor only protects your pc- PREVENTS MorE INTRUSIONS, the full version gets rid of existing malware
spybot is totally free and protects and gets rid of existing malware from your pc
adaware does the same as spybot
you need to do a full system scan with every anti- malware program you have, while your computer is in safemode and you are not connected to the internet in ANY WAY
the keylog keeps coming back because the keylogger is still there and it will keep sending thin information as long as its still there and you are connected to the internet!!!
atariangamer - December 27, 2007 10:09 PM (GMT)
Sorry for the triple post but....ITS DONE!!!!
Not a single durn bug in the joint. The things that came back, I edited their code till they were blank and non spyware, and they don't get replaced. Whew, thanks sliminator, quarkz, and lucius. o, and quarkz, sorry for getting angry at you. It did help a bit, I was able to manualy delete the bugs thanx to that program.
Now, let me recap on a day wasted:
7:47am - I try to get ready for a long day of trying to beat Indiana Jones and the Fate of atlantis.
8:25am - I see a huge problem, my background says I've been hacked.
12:58pm - my dad comes home, and I hide "problem" from him, have lunch and he leaves
2:04pm - start this topic to ask for help
^
|-trying various softwares and methods, cleaning out bugz
|
|
|
5:09pm - right on time, the problem is fixed! Thank the LORD!!!!
Well, that really was a day well wasted. I'm gonna talk to my sis about internet security when she gits home...thanx again everyone :approve: :approve: You deserve it! now, could an admin close this topic?
EDIT: Quarkz got out first...still you can close it.
Lucius Octavion - December 28, 2007 12:31 AM (GMT)
Glad things seem to be working alright. I'll leave this open for a little while more, just in case... ^_^
atariangamer - December 28, 2007 05:14 AM (GMT)
My sister just got home (very late) and she was glad its gone. The timing was perfect, because right after my last post, my dad walked into my room (with laptop hooked to tv for gaming that was supposed to be happening) and started watching me play Afterburner 32x. If I still had those bugs, this post probably wouldn't have been visited for a LOONG time, due to restrictions...so THANK YOU for all you've done, guys.
PS - She just downloaded the Myspace IM again...she tried to shush me when I told her that might mess up my days work. Such is a day in the life of a boy named ATARIANGAMER.
Lucius Octavion - December 28, 2007 05:45 AM (GMT)
Epic. :approve:
I shall now close this topic at your request.