Noncompliance: Infected again with nasty spyware and popup shit.

This is topic Infected again with nasty spyware and popup shit. in forum Computer Hardware Discussion at Noncompliance.

To visit this topic, use this URL:
http://www.noncompliance.com/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=8;t=000164

Posted by Trany (Member # 31) on :

Adaware hits 50-80 files a day that have infested my machine. I am guessing its time for a format, unless you have any solutions?

Posted by Jomama (Member # 56) on :

quote:
Originally posted by Trany:
unless you have any solutions?

Stop downloading gay porn..... [lol]

Posted by Trany (Member # 31) on :

Its from lesbo midget tossing, actually its a nasty one the replicates itself and moves after being deleted. I will just reformat I guess. I have tried MS antispyware, and its beta is preaty good, with a integrated realtime scan.

Posted by Cremator (Member # 8) on :

I use a one-two punch of AdAware abd Spybot. Run one, then the other and they get rid of everything I've ever been plagued with. SpyBot also has a nice feature called immunization which pre-blocks know malware from being installed in the first place.

Posted by BoondockSaint (Member # 67) on :

I've actually been testing the Microsoft anti-spyware beta both at home on 3 machines and at work on 5 machines and it's pretty good.

Scheduled scans, scheduled updates and real time protection make it the best one out there that I've seen.

Of course, they say none of them find all Spyware, so you're smart to do a combo of MS and Ad-Aware. I don't even bother with Spybot anymore...

And just to be safe, you can be careful downloading and isntalling free shit off the internet Trany. Especially anything with midgets and the word "tossing". [Wink]

Posted by Klaus (Member # 66) on :

There are a few ad programs that ad aware can't get rid of. They keep coming back when you reboot. There are solutions on their message forum to have ad aware scan differently but I have had little luck with them. Reinstall [Frown]

Posted by Chadwick (Member # 45) on :

Or just run ad-aware every time you reboot. And, only reboot like twice a year [Wink]

thats about all the more i reboot with my work computer. [Wink]

Posted by Crack_Dealer (Member # 68) on :

I use the 1-2 punch of spybot immunization and adaware....haven't had any problems in over 6 months.

Posted by Crack_Dealer (Member # 68) on :

Trany are you infected with CoolWeb?

Posted by Hauserdaddy (Member # 50) on :

The best place to get your computer infected are the warez sites. Avoid these sites at all costs...

I use ad-aware and spybot and am clean as well.

Posted by Trany (Member # 31) on :

Damn warez site, I should just pony up the dough and buy legit software. I am aflicted with a bunch of malware and some nice trojans that rename and relocate.

Posted by BoondockSaint (Member # 67) on :

Chris Trany, change your sig...some of us open this at work! [Big Grin]

Posted by Trany (Member # 31) on :

whats the big fucking deal? jk, my bad.

Posted by BoondockSaint (Member # 67) on :

Okay, guys, I need your collective computer brains to go to work on this one, I'm stumped.

I received a laptop with the, "It doesn't work right." explaination.

Turns out the computer is infected with major spyware and viruses. Worst case of self-replication I've ever seen.

It actually prohibits the applications Ad-Aware, Spybot and McAfee from even being run unless you rename the executable. McAfee won't run regardless.

Downloaded Microsoft Anti-Spyware beta, and it fails in installation. No error, just drops.

Hijack this logs turn out several suspicious files, which have all been removed.

I've cleaned everything up, and I still have these errors:

1. about:black browser hijack (even though Ad-Aware finds no spyware installed)
2. Cannot install software.
3. Cannot launch McAfee virus scanner, or McAfee Firewall
4. Cannot launch AdAware, Spybot without renaming the execuatble.
5. A strange file (a Google search shows up NOTHING) is running. I go into safe mode, find the file, delete it, and when I log back into normal mode, a new file has appeared (Google search shows up NOTHING on this file). Examples have been: tcmswdev.exe, instle16.exe, kbdhtime, ftii009.exe, noiscurs.exe.

VERY strange. Running Trend Micro's free virus scanner...will see what happens.

Let me know if you guys have any ideas.

Obviously this isn't my machine, so I can't just uninstall McAfee (which would be my preference).

Thanks! [lol]

Posted by BoondockSaint (Member # 67) on :

And when I run a search for the files it creates, I find 2. Example:

prodbdic.exe
prodbdic.ocx

Posted by Jomama (Member # 56) on :

Stop downloading porn.

Posted by Chadwick (Member # 45) on :

zerofill...Format...reinstall....rinse.....repeat

Posted by Klaus (Member # 66) on :

Yep, by the time you fuck around with all the fixes - would be easier to just format/reinstall.

Posted by Chadwick (Member # 45) on :

And a MUCHO cleaner result.

Posted by BoondockSaint (Member # 67) on :

quote:
Originally posted by Jomama:
Stop downloading porn.

quote:
Originally posted by BoondockSaint:
Obviously this isn't my machine...

[ 04-26-2005, 06:56: Message edited by: BoondockSaint ]

Posted by BoondockSaint (Member # 67) on :

quote:
Originally posted by Klaus:
Yep, by the time you fuck around with all the fixes - would be easier to just format/reinstall.

I know...such a mess.

I wish I could reformat, but this guy hasn't backed anything up.

Cool, I know how to fix 90% of the Spyware/Virus problems without reformatting, but this one is unique enough that I thought I'd ask you guys what you thought.

Thanks anyway

Posted by Ender (Member # 55) on :

My computer just got dumped on by some AIM spreading ad software and files. I got a message from one of my buddies that said "hey, check this out" followed by a link. When you click on the link, it downloads an exe file which automatically installs. Pretty mean.

Anyways, i did a system restore to a couple days ago which seemed to get rid of most of it. Then i just went through the program files and deleted anything suspicious. But, i want to run some anti-spy software to make sure i got all of it.

What exactly should i run? Are adaware and spybot still the best? What about this new microsoft one?

Posted by Cremator (Member # 8) on :

I still do the 1-2 of AdAware and Spybot. Haven't tried MS yet as it is still BETA (which I don't trust for anything). They keep me clean and I never see suspicious shit running in the background.
Then again, I don't surf the porn sites anymore, so if you can go back to old school ham-on-the-bone with printed magazines Ender, you will likely avoid this in the future...
(That's right, I don't buy your AIM buddy story: you were spanking it to some ePorn and got infected)

Posted by Ender (Member # 55) on :

[Roll Eyes]

Posted by BoondockSaint (Member # 67) on :

MS AntiSpyware is nice for 3 reasons:

1. It's free (for now) and a decent, thorough spyware scan.
2. It has real time protection (if you enable it). So when your computer boots up, MS AntiSpyware may catch what's trying to install.
3. You can set it to check for updates (and install them) at 1 point in the day, and run a scan at another point. Mine updates at 9am and scans at 1pm (usually I'm at work).

SpySweeper is pretty decent, but is only a 30 day trial.

And Ad-Aware has always been my personal favorite, but I now run the Ad-Aware, MS AntiSpyware combo. I never really got into SpyBot, but it's popular...

Posted by Hauserdaddy (Member # 50) on :

I run ad-aware and Spybot...

Posted by Crack_Dealer (Member # 68) on :

Likewise...AD-Aware and Spybot...never have any troubles.