Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

How the hell do I remove this spyware!?

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » The DU Lounge Donate to DU
 
Sannum Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:33 PM
Original message
How the hell do I remove this spyware!?
I have tried spybot, ad-aware for the past 5 hours and it is still on my computer. It is listed on Spybot as VX2/f. I also have DSO Exploit an IE Plugin. I am so close to doing the system restore with the CD's that came with the computer. Does anyone have a solution?

I hate these spyware inventing fuckers
Printer Friendly | Permalink |  | Top
Beware the Beast Man Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:36 PM
Response to Original message
1. Very carefully..and that's not a smartass answer.
Along with Spybot Search & Destroy, I also have Bazooka Spyware Scanner, which picks up any remaining spyware and tells you how to manually remove it from your machine. It's a pain in the ass, and even that is not foolproof, but it helps.
Printer Friendly | Permalink |  | Top
 
Talkative1 Donating Member (22 posts) Send PM | Profile | Ignore Sun Sep-12-04 10:36 PM
Response to Original message
2. You have to edit the registry, most of the time
What's the name of the file?
Printer Friendly | Permalink |  | Top
 
carpetbagger Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:37 PM
Response to Original message
3. Microsoft has a very, very good update available.
It got rid of most of what I had lurking around.

hijackthis is a program that will generate a list of what's been programmed to run on your computer, and is a good way of detecting some of this stuff that doesn't just go away with lavasoft's adaware, spyguard, etc. Googling each file name will usually tell you what is and isn't good or bad.
Printer Friendly | Permalink |  | Top
 
ornotna Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:39 PM
Response to Original message
4. Go here
Tells you how to remove it manually.

http://www.pestpatrol.com/pestinfo/v/vx2.asp
Printer Friendly | Permalink |  | Top
 
welshTerrier2 Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:39 PM
Response to Original message
5. try spyWareBlaster
Edited on Sun Sep-12-04 10:40 PM by welshTerrier2
i used to use spybot and i still run adAware once in awhile ...

but spyWareBlaster has kept my machine spyware free ... you can download a free copy ==> here

make sure you get the latest protections file and activate all the protections it provides ...
Printer Friendly | Permalink |  | Top
 
DavidMS Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:39 PM
Response to Original message
6. Got a few sugestions...
Edited on Sun Sep-12-04 10:41 PM by DavidMS
Update the programs and try again...

DSO Xploit is not covered by Spybot...

Try googling around...

http://www.lavasoftsupport.com/index.php?showtopic=44893

Here is some more info:

http://www.daniweb.com/techtalkforums/showthread.php?t=8141

I hope this helps.

Spywear programs must be Repugs
Printer Friendly | Permalink |  | Top
 
welshTerrier2 Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:39 PM
Response to Original message
7. oops ...
Edited on Sun Sep-12-04 10:40 PM by welshTerrier2
n/t
Printer Friendly | Permalink |  | Top
 
Bush_Eats_Beef Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:39 PM
Response to Original message
8. DSO Exploit is a bug in Spybot
Google it and you will see that Spybot reports a false positive on this. You should run Adaware as well.

Here's an article on VX2/f from Pest Patrol (with manual removal instructions):

http://www.pestpatrol.com/PestInfo/V/VX2.asp
Printer Friendly | Permalink |  | Top
 
NRaleighLiberal Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:40 PM
Response to Original message
9. Yes - I found a way that worked! See below....
I have both Spybot and Pop Up ad blocker....when they were originally installed, it found the bots, removed them, but they came back.

So I decided to do a little Googling. I did a search on *.dll and *.exe, and anything that looked suspicious (not related to a program that I put on my computer, or the System), particulary if it showed an install around the time I stated having problems, I wrote down the file name and searched each one on Google. I found about half a dozen dll files and a few exe files that were associated with spyware, and hijacked my computer, changed my home page, flooded me with pop ups, etc. I started my computer in Safe mode, removed all of those iffy files, restated, ran spybot again and things are great now. Give it a try...it takes some time, but is worth it! If you don't get rid of those suspicious dll and exe files, they just put the crap back on to your computer once you go onto the internet again.
Printer Friendly | Permalink |  | Top
 
Lady Effingbroke Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:44 PM
Response to Original message
10. Ad-Aware has a VX2 cleaner add-on
http://www.lavasoftusa.com/software/addons/vx2cleaner.shtml

Scroll down to the bottom of the page to download.

I don't know if it will get rid of the particular 'version' of VX2 that you are infected with, though - anything's worth a try! :shrug:
Printer Friendly | Permalink |  | Top
 
leftyandproud Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:44 PM
Response to Original message
11. did you...
update all of your spyware protection? I do it once a week...Just go through the options and look for the update area...get the latest ad/spyware definitions, then do a complete scan with ad-aware and spybot search and destroy. I also recommend the free version of a squared malware protection. Make sure you update it after installation as well.

http://www.emsisoft.com/en/

If you have Norton antivirus, update it as well...And if you don't have an antivirus, you should get AVG. You can get it at download.com for free.

In short..update EVERY DAMN program you have...Do a disk defragment to straighten out your hard drive and speed things up, then run all 3-4 anti-spyware programs on the thorough setting. It may take 12 hours, but if there is something on your computer, that should kill it.
Printer Friendly | Permalink |  | Top
 
wellstone_democrat Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:44 PM
Response to Original message
12. I have a "search" feature embedded in the bottom bar
Edited on Sun Sep-12-04 10:44 PM by wellstone_democrat
of my IE. I go to "remove" software int he control panel but there is nothing that I don't recognize as legitimate software. Any idea how to get rid of that pain in the ass? Its a little search window that hijacks any google or IE bar search I do. I don't know how it suddenly got on my computer.
Printer Friendly | Permalink |  | Top
 
Sydnie Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 11:01 PM
Response to Reply #12
16. You have been hijacked. See the instructions in my other post. n/t
Printer Friendly | Permalink |  | Top
 
wellstone_democrat Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 11:09 PM
Response to Reply #16
17. thanks!
.
Printer Friendly | Permalink |  | Top
 
unblock Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:45 PM
Response to Original message
13. the system restore option is actually not that bad
by all means, try the spyware route.

but i've had experts tell me that a full o/s reinstall should be done as frequently as every 6 months.

the registry in microsoft o/s grows and grows and becomes very inefficient. the standard o/s doesn't come with a good way to manage it, and unless you're a pro, it's not a good idea even with the right tools.

so the best thing to do is to reinstall periodically. not only does this guarantee removal of spyware, but it also returns the registry to a reasonable state. plus, it gets rid of installed apps that you don't really need. you just reinstall the ones you still find useful.

norton ghost apparently makes this process a whole lot easier, though i've never tried it.


happy hunting!
Printer Friendly | Permalink |  | Top
 
leftyandproud Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:48 PM
Response to Original message
14. ALSO...
DUMP INTERNET EXPLORER!!!

Not only does the interface suck, but it is the target of every damn hacker on the planet.

Go with Mozilla Firefox 0.9.3

Vastly superior in every way...and free too! Install this once you get your system cleaned up, and you will never go back.

http://www.download.com/Mozilla-Firefox/3000-2356-10299359.html?tag=lst-0-1

Printer Friendly | Permalink |  | Top
 
Sydnie Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 10:57 PM
Response to Original message
15. Have you tried HijackThis?
Google for HijackThis. Download it into it's own folder. Close your browser windows then run that program. It will create a log file. Post that file at http://www.techsupportforum.com/ and let them know what your concerns/problems are.

They will look at the log and tell you what you need to remove to clean your computer. You can make most adjustments right through the HijackThis program, so you don't have to dive into your registry if you are not comfortable doing that.

It might take them a few days to answer all your questions, give you instructions on what to do and you might have to post more than one log. I have solicited help from them several times for problems and they have always been spot on with their advice.

Spyware sucks but the people there are the best!
Printer Friendly | Permalink |  | Top
 
Lady Effingbroke Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Sep-12-04 11:16 PM
Response to Original message
18. Yes, download HijackThis
http://www.majorgeeks.com/download3155.html <- HijackThis

If you've never used HijackThis before, here is a great site explaining how to use the program:
http://www.russelltexas.com/malware/faqhijackthis.htm

This is an 'automated' HJT log scanner that I found, it might be of some help in analyzing your HJT log just scan with HJT, then copy your HJT log into the scanner and hit 'go':
http://www.hijackthis.de/index.php?langselect=english

also, register at a forum like Sydnie mentioned, here are a few more:

http://forums.spywareinfo.com/index.php

http://castlecops.com

or

http://pcpitstop.ibforums.com

and post your HJT log there in the appropriate place for the experts to look at. Reading HJT logs can be an art, since there's so much crap out there and everyone's computer is set up so differently. Those places stay pretty busy, but if you keep your post kicked to the top, they will look at it pretty quickly and tell you what you need to fix.

Hope this helps! :shrug:
Printer Friendly | Permalink |  | Top
 
Sannum Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-13-04 01:06 AM
Response to Reply #18
19. Thanks so much everyone!!
After updating my existing programs at least four times since late this afternoon, as well and downloading and installing 4 more programs, I finally called a techie friend of mine and he said to download Spy Sweeper. It worked and I am now (hopefully) spyware free. Can you believe it found 104 programs that Spybot and AdAware did not find? The people who invent these programs should have their toes pulled off.
Printer Friendly | Permalink |  | Top
 
4morewars Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-13-04 01:15 AM
Response to Reply #19
20. I second mozilla !!!!!
I got hijacked a few weeks ago, long story short, I lost everything as i had to reformat. After the new install i added mozilla firefox, not even so much as 1 pop-up yet. I also bought LINUX as this is not the first time this has happened to me, but it will be the LAST !!!!!! F*** microsoft !!!!
Printer Friendly | Permalink |  | Top
 
Sannum Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-13-04 01:18 AM
Response to Reply #20
21. I will download it tommorow
I am so exhausted from the past hours of trying to fix the problem, that I can hardly type. It is something I have been meaning to do, but I just haven't gotten around to it.

Thanks so much!

S
Printer Friendly | Permalink |  | Top
 
4morewars Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-13-04 01:45 AM
Response to Reply #21
22. I hear ya !!!
It took me TWO days of trying to fix it before i gave up and reformatted, and I'm a network administrator !!! These people suck!!!!!!!!!!
Printer Friendly | Permalink |  | Top
 
happyasaclam Donating Member (165 posts) Send PM | Profile | Ignore Mon Sep-13-04 05:15 AM
Response to Original message
23. aboutbuster
I know that you have now solved the problem, but just in case someone else is having trouble with particularly stubborn spyware, I suggest giving Aboutbuster a go.
Printer Friendly | Permalink |  | Top
 
leftyandproud Donating Member (1000+ posts) Send PM | Profile | Ignore Mon Sep-13-04 07:08 AM
Response to Original message
24. your next step..
I recommend downloading TuneUp Utilities for Windows XP. It's shareware and you can use it free for 30 days I believe. Use it to clean out unnecessary files, and most importantly, your REGISTRY. Spyware can leave ugly tracks behind even after deleting it...seriously slowing down your computer. TuneUp has lots of nifty little settings including a registry cleaner and a registry DEFRAGMENTER...something I haven't found anywhere else. I noticed a nice speed improvement after using it to clean and straighten out the registry.

www.tune-up.com

Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Tue Apr 23rd 2024, 12:22 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » The DU Lounge Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC