Spyware Attacked Me! HELP!

Toggle sidebar Toggle sidebar
C

Clob

Distinguished
Sep 7, 2003
1,317
0
19,280
Seems as if somthing slipped by my scanners. This one is a real biatch! No matter how many times I delete it, It replicates itself with a new name of random letters! A Squared is useless and nothing else I know of can kill it. Any ideas?

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
SB will run, just doesnt kill this.... I realy dont want to reformat... DAMN!!!

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
Contact Nancy Kerrigan's lawyer immediately if you really felt it attacked you. That's a big law suit.

You could try Microsoft's anti-spyware program or use Pandasoftware.com's online spyware/antivirus program.

What kind of problems are you having and what's the spyware you're infected with?
 
In my years of fixing computers, I've never seen a piece of spyware bad enough to require a reformat. What are your scanners identifying the spyware as? What symptoms are you getting? Where are the random-letter files located?

Give us some details and I'm sure we can fix it without a reformat.
 
Regardless of how bad your system is running, I refuse to believe there is a point where the only solution is a reformat.
 
The spyware resides in my C: Windows folder, but thats not my biggest problem, It seems that I have a hijacker or somthing that goes by the name of

Aorora -part of ABI network

SBm Ad-aware, and A-Squared cant seem to kill it! HELP!

Also I dont want to format, I need a new XP cd... Mine is scratched!

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
<P ID="edit"><FONT SIZE=-1><EM>Edited by Clob on 08/07/05 06:16 PM.</EM></FONT></P>
 
Sounds like a job for Hijackthis!. <A HREF="http://www.spywareinfo.com/~merijn/downloads.html" target="_new">Clicky</A>

Download it, read the quickstart info, sign up on the Tomcoyote forums and post your log there <A HREF="http://www.tomcoyote.org/" target="_new">clicky</A>. In a couple days, (usually hours) you'll have a reply with instructions... do them, post a new log.., get new instructions.. etc. Could take 3 or 4 iterations to get a clean system.

Mike.

<font color=blue>Outside of a dog, a book is man's best friend. Inside the dog its too dark to read.
-- Groucho Marx</font color=blue>
 
This is your best bet:

Download the following programs-
Ad-Aware (www.lavasoft.com)
Microsoft Antispyware Beta (www.microsoft.com)
Webroot Spysweeper (www.webroot.com)
HijackThis (www.spywareinfo.com/~merijn/)

Install and run the first three, and update them all to the newest definitions. BOOT INTO SAFE MODE, then run them in this order:

Ad-Aware, Full Scan. Repair everything it finds.
Spysweeper. Repair everything it finds.
Microsoft Antispyware Beta, full scan. Generally you can remove everything it finds, but double-check to be sure. Make sure "remove" is selected beside each item, not "ignore".

Reboot into windows, run HijackThis, copy the log and post it either to the website mentioned above, or this forum. I can help you from there.
 
I have used all of those above and to no avail I still have spyware rooting in my windows folder giving me a headache. I wonder when it will be less of a headache to just reinstall xp (after I buy a new cd burner)

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
Sunbelt's CounterSpy is worth a shot. Their DNR techniques might just be what you're looking for.

<A HREF="http://www.sunbeltsoftware.com/CounterSpy.cfm" target="_new">CounterSpy</A>

_____________
<i>There are 10 kinds of people in the world - those who understand binary
and those who don't</i>
 
I have been using Sunbelt Counterspy and there isn't much that can slip by. One of the magazines said it gets 87%.Not sure if that is true but it might be close.

Is it true that cannibals don't eat clowns because they taste funny?
 
I will give that a try thanks. There was a program I once had that would bombard a file untill it gave up or somthing. Worked for somthing similar before this. I just cant remember the name...

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
Try this, if you know the file/malware file name ... <A HREF="http://www.snapfiles.com/get/moveonboot.html" target="_new">MoveOnBoot</A>


<b>"The Edge - there is no honest way to explain it because the only people who really know where it is are the ones who have gone over." Hunter S. Thompson, </b><b><i>Hell's Angels, 1965</i></b>
 
Counter spy did not kill it... GRR! This is getting old fast.

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
IT WORKED! I LOVE YOU I LOVE YOU I LOVE YOU!



<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
SCRATCH THAT! IT DIDNT WORK! GRRRRAAAAAA!!

Look like im forking up $$ for a new dvd drive... Ill make a post in the correct forum.

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
Please ... don't say you love me ever again ...


<b>"The Edge - there is no honest way to explain it because the only people who really know where it is are the ones who have gone over." Hunter S. Thompson, </b><b><i>Hell's Angels, 1965</i></b>
 
Clob ... if you promise not to say you love me, I'll give you another suggestion ... <A HREF="http://www.pcworld.com/downloads/file_description/0,fid,25367,00.asp" target="_new">Force Delete</A> ...

Have you ever tried to delete a file or folder, only to get a Windows error message saying no can do? Maybe you're having a bad hair day, but more likely the file is being used by a program. Try downloading ForceDel, a utility that works with all Windows versions to force delete the stubborn file. The program runs from a DOS command window (click Start, Run, and type "cmd"). Enter forcedel filename to give the file the boot for good.
Click to expand...

<b>"The Edge - there is no honest way to explain it because the only people who really know where it is are the ones who have gone over." Hunter S. Thompson, </b><b><i>Hell's Angels, 1965</i></b>
 
No matter how many times I delete it, It replicates itself with a new name of random letters!
Click to expand...
Now that I've thought about it, I'm thinking that it's NOT spyware.

It sounds like a virus/trojan/worm. Here are some things you can try:
1. <A HREF="http://www.housecall.trendmicro.com" target="_new">Housecall</A>
2. <A HREF="http://sophos.com/support/knowledgebase/article/3251.html" target="_new">SAV32CLI from Sophos</A> - Be sure to read the instructions on the site. The scan is actually performed in Safe Mode at the command prompt to make it more difficult for the trojan/virus/worm to do its thing.
3. <A HREF="http://eset.com/download/trial.htm" target="_new">NOD32</A> - Before installing, you will need to uninstall your current antivirus application and reboot.

I'm guessing that your current AV scanner isn't cutting it since it hasn't found anything, so the above scanners could help. Also, are you using a firewall? If not, download <A HREF="http://www.download.com/ZoneAlarm/3000-10435_4-10421033.html?tag=lst-0-1" target="_new">ZoneAlarm</A>.

Good luck!

_____________
<i>There are 10 kinds of people in the world - those who understand binary
and those who don't</i>
 
LOL.. Thanks guys... I Will give them a try.

BTW- Its forum love (a kind of pat you on tha back thing)... I dont swing that way buddy!

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
I kinda bit the bullet and did the Format thing... I't didnt hit me that I dont have the problem anymore.. Ive only ben up 30hrs... Gotta excuse me lol

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
lol ... I was just joking with you dude ... 😉


<b>"The Edge - there is no honest way to explain it because the only people who really know where it is are the ones who have gone over." Hunter S. Thompson, </b><b><i>Hell's Angels, 1965</i></b>
 
Hey, it's actually true that many computer repair shops end up reformatting the machine over 60% of the time due to time restraints and the high level of spyware and virus infections. Of course, that may be an underestimation.

At least you got the problem wiped away! 😀

_____________
<i>There are 10 kinds of people in the world - those who understand binary
and those who don't</i>
 
I was jokeing too! JEEZE! GRR!

Computer shops around here charge between $50 and $70 benchtime and charge around $30 for spyware/virus clean and optimization.

Then they charge like 20% over newegg prices for parts then they charge labor!

<font color=red>"Battling Gimps and Dimbulbs HERE at THGC"</font color=red>

"<font color=blue> Wusy</font color=blue> <-Professional sheep banger"
 
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom