How to remove spyware/adware

[phalkon30]

What is spyware? There are many deffinitions as to what spyware actually is, I think this site (http://www.spychecker.com/spyware.html) sums it up pretty well, basicly, spyware is intrusive, nasty, and can really slow a system down
---------------------------------------------------------------------------------------
How can I tell if my system is infected with spyware or adware? There are quite a few programs out there that will detect spyware and adware, the 2 you will hear about the most, are (Spybot S&D (http://security.kolla.de)) and (AdAware (http://www.lavasoft.de)), these two programs have the best detection rates, and are updated the most frequently
---------------------------------------------------------------------------------------
Which program should I use, Spybot S&D, or AdAware? I have used both quite a bit, and have used both since some of their first releases, Spybot deffinately gets my vote for this one, but that doesn't mean AdAware is useless. Here are some program highlights

Spybot S&D This program does much more than just remove spyware, it is really a swiss army knife of sorts. Besides an awesome detection system for spyware, it can:
-Check for and fix inconsistencies in the registry
-Remove usage tracks
-Patch some windows security holes
-Remove trojans
-Make your browser imune to most browser plugins (they can never be installed, and are blocked instantly)
-Host file editor
-Edit what programs start with windows
-View advanced things in windows like BHO's, Activex Controlers, and Winsock LSPs
-Built in spyware database with links to the privacy policy of each, along with what each spyware component does
-Expert and noobie mode, so anybody can use it
-Great backup support (if you remove something you want, it can be restored easily)
-Much faster than AdAware
-Many more great features

AdAware I still use AdAware, on rare occasions spybot will miss a file, that only AdAware will detect. If you haven't checked out the latest version of AdAware, I suggest you do, its a huge improvement over past versions (you can now update WITHIN AdAware). Other than getting a few things spybot won't, Adware has one nice feature, and yes, it it's not free.

With AdAware 6 Proffessional, you can:
-Lock down sensitive areas in your memory and registry to keep them from being compromised!
-Real-time blocking of browser hijack attempts and drive by downloads!
-Real-time blocking of forced installations and activeX!
-Includes a powerful popup-stopper
---------------------------------------------------------------------------------------
BEFORE STARTING A SCAN, MAKE SURE YOU HAVE ALL OF THE LATEST UPDATES
---------------------------------------------------------------------------------------
I did a scan with Spybot, what do I do next? You will see 3 possible colors in the spybot results:
-Red - Spyware, Adware, harmful cookie (not food), Trojan, or any other HARMFUL bit of code (SAFE TO REMOVE)
-Blue - A registry inconsistency, if you don't know what it does, or are not having problems DO NOT DELETE THESE, you can do harm to your computer
-Yellow - Usage tracks, fully SAFE TO REMOVE, you can ignore them if you want (usage tracks are lists, like recently opened word documents that you see when you click File in Word)
---------------------------------------------------------------------------------------
I removed something I did not want to, now a program will not function or windows is giving me errors, what do I do? While this does not allways happen, some programs depend on spyware, if they see you have removed it, they will cease to function until you put these files back (yuck!)

In Spybot, simply hit the Recovery button, this will bring up a list of things you have removed. Place a check by what you want to restore, and click "recover selected products"

In AdAware, click "Open quarantine-list" and restore what you need
---------------------------------------------------------------------------------------
How do I PREVENT my computer from getting MORE SPYWARE? There are many ways to help prevent getting more spyware
- In spybot, go to the imunize button, and install the browser helper
- READ the User Agreements before you install. Most spyware can be opted out of, or other versions can be found without spyware
- Use a program that blocks the installation of spyware (like adaware pro)
- When installing P2P software, make sure to get a clean, or "lite" version (Kazaa lite (http://www.k-lite.tk)) (Clean Imesh by DrDamn (http://www.drdamn.com/cleanclients/imesh131.shtml)) (Clean Grokster (http://www.drdamn.com/cleanclients/grokster160.shtml))
- USE YOUR HEAD, if something doesn't look right, or sounds too good to be true then it most likely is!

[Rahwgwar]

Good one, Phalkon..........ZP can and should make another sticky out of this one......after getting a few suggestions and some editing, it should be fully ready to go...........

I'm testing a program right now and I'll let you know if it's any good.

[Rahwgwar]

Did Spyblaster development cease for XP? I can't find any information on it for this OS, but can for others?

Phalkon...........I dunno if you want to get into paid and shareware spyware removal programs and such, but if you do, you are missing quite a lot........BUT it's up to you how you want to deal with it

-Peace

[CCSDUDE]

I've stuck both of your newest FAQ threads....good job dude!

For people like "us" it seems kinda small and the "I knew that" shit comes into play.

But for newbies and such who are lost and confuzzled over why their system sucks ass when it's brandnew after they installed something like KMD...it's a godsent. : )

Also if you wish I can close all your FAQ threads so no one can muck them up. You can PM me when ever you wanna update so it all stays slick and clean without any double talk from others that may confuse newbies.

[Krell]

We are not trying to be the definitive source for everything, just some pages to answer the most common questions. Phalkon is right on target, where's everyones elses contributions?

[Rahwgwar]

SpyBlocker was a dud..........way too buggy and unreliable.......I used the latest freeware version..........go ahead and delete this thread

[reg]

. . . thank you . . . : )

[mirtillotown]

Thank you for all info .... :playboy

[phalkon30]

CCS, I'd like to leave it open, that way if there are any suggestions for updates to it, or if somebody has a question about something I said, I can answer it here

Rahwgwar, if you find something better, great, but I doubt I'll change this thread, Spybot and AdAware are suggested the most on this bbs, and most other sites, so I'd like to keep things simple, not too many options, nothing to pay for, and just enough to be dangerous with while still being able to take a step back, besides, I can help with problems on these programs, I've used them quite a bit

[[NK]Mutant]

Another way to block cookies from DoubleClick, etc. is to use supertrick. It also has the nice effect of removing ads for you :P. Maybe you should add it?

[phalkon30]

Hmm, I'm not sure, this is for spyware removal

I could allways make a thread on how to block popups, and have a short thing for any popup blocking software suggested

[IAMSKINZ]

Hi......

I would like to welcome anyone here that is having any problems with Spyware, Adware, or for that matter any kind of Datamining software to visit the Lavasoft Support Forums (http://www.lavasoftsupport.com), we are a real friendly bunch and welcome any and all to come and post your questions. We will be glad to help in anyway we can.

...and remember........

Have fun.............................. :tilted

[Winphuk]

Thanks for the Info Phalkon!


I like to use Bullet Proof adware/spyware remover.

It's fast, and in addition to spyware it removes adware, trojans, keyloggers, and browser hijackers.

[Rahwgwar]

Originally posted by Winphuk
Thanks for the Info Phalkon!


I like to use Bullet Proof adware/spyware remover.

It's fast, and in addition to spyware it removes adware, trojans, keyloggers, and browser hijackers.

Yeah and its a proven ripoff of Ad-Aware and Spybot...........add to the fact that it is outtdated severely and the developer has the nerve to charge you 30 dollars to use it...........while still marketing its false features

[thunderrooster]

Hello everyone.I have used all the ones posted and the best one i have fount is pestpatrol at http://www.pestpatrol.com It detects and protects against more spyware/adaware than any program as of yet it has a monitor that monitors for adware/spyware and keyloggers and your cookies as you browse and they gonna add a portpatrol to.As far as detecting it,a bandwidth monitor is good.When i first got into all this i downloaded one and noticed on day i was downloading a bunch of info and had only my browser running.I fount out it was newnet.Another program i would suggest is active ports at http://www.protect-me.com/freeware.html it tells you every port open and what program it is using.But i dont worry to much now since i got pestpatrol it keeps me protected more than even Bullet Proof adware/spyware remover and thats one of the first paid programs i was gonna buy,i am glad someone told me about pestpatrol.

[Sosua]

For me the best spyware is PeerGuardian.

When you use Ad-Aware or Spybot you are already infected when you make a scan. The information that these company wants are already in there posession.

When you use PeerGuardian they dont even come in. They are stop at the door.

Since i use PeerGuardian every time that i make a scan with AdAware or Spybot it is allways empty. They just can't come in.

Just make shure that it is allways up to date and you will never had anything in your computer.

[crackerjacker]

I use spybot and just now decided to use ad aware again and I did a scan and it seems like today I had this component that ad aware found called biprep.exe.

heres some more information about this.
but before I post the link I just want to say that I have only been using spybot spyware remover and have not been using adaware.

heh thanks Phalkon for reminding me from your thread that both are needed because spybot missed this spyware component.
biprep.exe

just so you know heres some more information on this evil component called *spyware*
http://www.kephyr.com/spywarescanner/library/abetterinternet/index.phtml

[aqlo]

Thanks CJ this is a great thread :gj

[Demented Evil]

Hi everyone!... new here but i had to post.

I use updated Lavasoft Adware along with browser blocker and panicware pop-up stopper before i got browser blocker i used Hijack This! ... was a good combo... can anyone suggest a pop up stopper that allows "good pop-ups"?

[crackerjacker]

Hi everyone!... new here but i had to post.

I use updated Lavasoft Adware along with browser blocker and panicware pop-up stopper before i got browser blocker i used Hijack This! ... was a good combo... can anyone suggest a pop up stopper that allows "good pop-ups"?

i use Pop-Up Stopper Free Edition get it here

http://www.panicware.com/product_psfree.html

its free and works well.

[riderx]

:fire

Disable Active Script, pop up uses script to do a pop up. I hate script since there pop up which can have spyware.

To delete cookies in windows 9x, in autoexec.bat put in deltree -Y \Windoows\cookies\*.*

:hole

yeah you can disable active scripting, however some times its necessary to do certain stuff. but if your just surfing the web for basic stuff then you dont need it.

but sometimes its neccesary for gaming, filling out forms, the forms are dependent on the script call procedure.

but yeah google pop up stopper is good, but the other one from panic ware is pretty good to. i disable it sometimes when i need to go to a gaming site like playsite or something.

:)
i didnt know btw about the feature in googles pop up stopper that it can remember sites that you want to allow the pop ups on.

i wish there was a program that i could use that would allow the first pop up on a website, and then close the rest.
that is a good feature i would like. so if anyone knows of this program that is inclusive to a pop up stopper please post the information here thanks.

[Malicious Intent]

The google bar always seems to know whats good and whats not, but it is obtrusive if you don't use it for the search functions and auto-fill form as well. I wouldn't recommend it for anyone with a low res display.
If you have a friendly site, just one click allows all pop-ups. Google then remembers the site and that pop-ups are allowed.

[muffenme]

:fire

Disable Active Script, pop up uses script to do a pop up. I hate script since there pop up which can have spyware.

To delete cookies in windows 9x, in autoexec.bat put in deltree -Y \Windoows\cookies\*.*

:hole

[RJ5500]

I'm glad my firewall automatically disables active scripting. Those IE popups were getting annoying.

It's irrelivant now since I use Mozilla Firebird anyways.

[ThePowerToShare]

Wait, Mozilla actually doesn't have the same pop-ups IE has?


Wow.

[Burd]

I use both Adaware and Spybot, but Spybot hasn't been updated in a long time. What's with that? Should I get a different version? Also, Spybot seems to take an extremely long time to scan. Since they find different things, I would assume that they have slightly different purposes? Just wondering.

[Broccoli]

How do you update Spybot? In that updates thread, I see it every once in a while, then go to update, and there's nothing. What am I doing wrong?

[The Hunter]

Have you got the latest version, available here:http://www.safer-networking.org/
Also when you get an update, download it from australia. Good luck, and let us know how you make out.

[Brycen257]

The latest version of spybot is 1.3 so make certain that you have the latest version to ensure that you are fully protected. The latest version also has other features that not everyone may have taken the time to check out including :

The Immunize feature protects you against invasive spyware and now protects you from 1914
bad products .

Resident Protection provides both Sdhelper (internet explorer bad download blocker( plus tea timer that provides additional system protection at all times )

BHO section shows browser helpers that are installed on your system (some are helpful but many are malicious and can interfere with your internet browser)

IE Tweaks allows you to lock the IE hosts file, IE start page setting and IE Control Panel.

Process list, startup list and uninstall info are other sections that are available.

All you need to do to access most of these features is go to Mode and select Advanced mode in the spybot menu . The open up the tools section and select the tools above or any others you want to utilize.

This is a great product. Use it to its full potential. No one who uses the internet should be without spybot . :;)

[jahill]

1 i can tell you not to use is secretmaker....it crashed my computer...its great to stop popups and banners and the like but dont use it....

[Mighty_Exodia]

thanx for the information

[The Tinker]

I have been going nuts trying to isolate 'startpage.6.aq', it seems to be unstoppable, I have read every msg in every forum I can find. Some say it is because of a hole in MS Java VM, others say it resides in polymorphic DLL's, AVG finds it and says it removes it but it keeps coming back. I have turned off auto restore, removed everything I can find in the registry that does not seem to belong, deleted tmp files and still this so called trojan horse rears its ugly head and continues to bite me. Does anybody know of a difinitive method to remove afore mentioned Pain In My Arsenol.

[Miniver]

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_AGENT.J

[Miniver]

or it's this one http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_AGENT.AC

Most likely it's the second. But try both.

Click Fix tool

[The Tinker]

Thanks, I'll check it again.

[crackerjacker]

update your spyware adware their is an update.
i dunno where the other thread is

[truelyme]

Spyware and the like is something everyone needs to be aware of and prevent, if nothing more than keeping your resources yours.

Things like a host file and updating it, help prevent communications to ad servers. Many times slow downs, especially if you use ip blockers can be attributed to ad server bottlenecks and the wait is many times your information waiting to be accessed by the ad server before you get the internet page open.

As was mentioned before, good ip blockers such as protowall do a lot to prevent the spyware from getting to your computer.

Using firefox as a browser and getting extensions such as nuke it and adblocker can help also. One of the tricks I use is to add a wild card right after the main ad companies name. Such as adserver/* as an example. With adblock you right click the image and then see where the adserver address is.

Blocking activex, java scripts, and flash will also help to some degree. This depends on the individual user and what s/he expects to get out of the net experience as to whether this is acceptable or not.

Another nice preventer is to block third party cookies and to not allow the installation of software from the site you are visiting. This can be done in both IE and in Firefox. The best preventer is not to let it on your computer. If it is already there then spyware removers are a necessary tool to keep your computer shipshape and in top working order.

Some software firewalls are also good assistants when it comes to preventing spyware and adware. One of the ones that I like in that sense is Kerio. If you are an advanced user of Kerio, then you have all sorts of tools at hand to make use of limiting your exposure to such. If you are a beginner then there is a less advanced function for you. The ad block function is part of the paid for version but you can get a 30 day trial without paying. The rest of the functions will continue to work even after the trial.

[muffenme]

:fire

One sure way to get ride of spyware is to first set up a clean system with some kind of backup system to a cdr or dvd+/-r and what ever programs you need for your computer and do a backup. If your computer act funny then do a restore of the clean os. Make sure that you have a different drive for you data. The data file can be backup to cdrw or dvd+/-rw because you might be backing this up more often then your os.

:hole

[Auggie2k]

One sure way to get ride of spyware is to first set up a clean system with some kind of backup system to a cdr or dvd+/-r and what ever programs you need for your computer and do a backup. If your computer act funny then do a restore of the clean os. Make sure that you have a different drive for you data. The data file can be backup to cdrw or dvd+/-rw because you might be backing this up more often then your os.

Thats a good backup plan but also if anybody does decide to do so, do not have your internet connection plugged in because thats where mr. and mrs. spyware live! I done a clean restore recently, it was too slow from some months of ill care of my computer, anyway within minutes of connecting to the internet I had spyware, so be careful!

[bxgy]

I recently got malware called Veevo on my machine, AdAware detected it, I read-up on it and it wasn't good, could lead to hijacking by someone. I downloaded SpyBot and it did not detect it, but it detected some other things that Adaware didn't. I finally got rid of Veevo, now I am using AdAware SE, SpyBot, and Microsoft Antispyware. I don't think I need all three, which one should I uninstall? I am thinking Microsoft AntiSyware. Does anyone have any suggestions?

[Auggie2k]

I recently got malware called Veevo on my machine, AdAware detected it, I read-up on it and it wasn't good, could lead to hijacking by someone. I downloaded SpyBot and it did not detect it, but it detected some other things that Adaware didn't. I finally got rid of Veevo, now I am using AdAware SE, SpyBot, and Microsoft Antispyware. I don't think I need all three, which one should I uninstall? I am thinking Microsoft AntiSyware. Does anyone have any suggestions?
Well I see where your coming from on this but I would suggest keep all three. I had a similar malware problem which Microsoft AS didn't pick up but Adaware and Spybot did, with lots of other things as well. So the way I have my computer running now is MAS for the continuous protection (the popup management for alerts is excellent) and Adaware and Spyware for the thorough scans. Works great for me.

[bxgy]

:icon_scra This Veevo keeps being detected by my AdAware and I have deleted it through AdAware and I have deleted the key through regedit and it keeps coming back, what can I do? Maybe just ignore it, I guess. Has anyone ever got an update from AdAware and had a problem with it? I have tried everything, any advice would be appreciated.

[crackerjacker]

:icon_scra This Veevo keeps being detected by my AdAware and I have deleted it through AdAware and I have deleted the key through regedit and it keeps coming back, what can I do? Maybe just ignore it, I guess. Has anyone ever got an update from AdAware and had a problem with it? I have tried everything, any advice would be appreciated.
run that let it scan your puter and it will remove the spyware

http://housecall.trendmicro.com/

[Digital Bliss]

its much easyer then you think unplug your modem

[ivrey]

hi.
I think it's better to use anti-spyware without signature based.
It can detect unknowing spy and dont neet for upgraide.

[lifehacker]

hi.
I think it's better to use anti-spyware without signature based.
It can detect unknowing spy and dont neet for upgraide.
But it's harder to use and depends very much on the users knowledge of spyware.

[ivrey]

its true. but Anti-keylogger (http://www.freedownloadscenter.com/Utilities/Misc__Utilities/Anti_keylogger.html) not hard for use I think

[lifehacker]

its true. but Anti-keylogger (http://www.freedownloadscenter.com/Utilities/Misc__Utilities/Anti_keylogger.html) not hard for use I think
Just use Ewido or ProcessGuard instead of that. If its a keylogger that sends data to another person from your computer a firewall should do the trick.

[ivrey]

Just use Ewido or ProcessGuard instead of that. If its a keylogger that sends data to another person from your computer a firewall should do the trick.
Ewido or ProcessGuard? I dont know this programms. Do they use a signature based?

[lifehacker]

Ewido (anti-malware) is signature based, and includes realtime protection as well as an on demand scanner. ProcessGuard asks you for permission to run any executable file and tells you when the executables are modified. Another great thing about it is that it can prevent unauthorized modifications, terminations and readings of your files. It also protects you from Global Hooks, Rootkit, driver or service installation, and registry DLL injection. The program is very good but a little hard to use.

However you still should use an antivirus in combination with it. NOD32 works perfectly with it and is an excellent antivirus which I reccomend. Kaspersky 6 has its own "ProcessGuard" engine so if you dont want to run two layers of protection at the same time you might want to take a look at that.

[ivrey]

Ewido (anti-malware) is signature based, and includes realtime protection as well as an on demand scanner. ProcessGuard asks you for permission to run any executable file and tells you when the executables are modified. Another great thing about it is that it can prevent unauthorized modifications, terminations and readings of your files. It also protects you from Global Hooks, Rootkit, driver or service installation, and registry DLL injection. The program is very good but a little hard to use.
signature based it is day before yesterday technology. It good when you can update signature based in time. But new spyware still unknowing about two weeks before it include in signature based and in this time your computer can be infected

[lifehacker]

signature based it is day before yesterday technology. It good when you can update signature based in time. But new spyware still unknowing about two weeks before it include in signature based and in this time your computer can be infected
Thats why many antiviruses have heuristics, they have rules for what can be defined as a virus and they are able to detect these viruses even if they are not in their signatures. Most antiviruses have some heuristics though most have terrible heuristics. NOD32 and AVK have amazing heuristics. Kaspersky also has pretty good heuristics. Other things that can protect against viruses not in signatures is common sense and programs like ProcessGuard (already described above) and Ghost Security Suite or OnlineArmor.

Also about the signatures, Kaspersky (has the best signatures of any antivirus by far) updates sometimes every other hour so almost everything is in its signatures very fast.

[Reaper88]

Thank you. :icon_pira

[HERONEO]

thaNKS YOU M8

[Obsession6789]

Thank you for the info

[antivirus6613]

thanks for info

[jd3rul]

Better use online free scan . Many of antivirus producers website have Online scan tool : BitDefender , Kaspersky , Norton Antivirus ( Symantec )

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym : Symantec Online Scan tool

http://www.bitdefender.com/scan8/ie.html : Bitdefender Online Scan

http://www.kaspersky.com/virusscanner : Kaspersky Online Scan

http://www.eset.com/onlinescan/ : NOD32 Online scan

Hope this can help you . I don`t thrust the Free Antispyware / AntiTrojan ... because themselves can be a virus

[DasFox]

If anyone is using Adaware dump it, it's crap, it had it's day but they are over.

SuperAntiSpyware is one of the best, possibly the best Spyware/Malware app at the moment.

http://www.superantispyware.com/

AVG Anti-Spyware is also one of the better ones too.

http://free.grisoft.com/doc/5390/us/frt/0?prd=asf

If you're wanting to learn more or have any problems you should join Wilders Security Forums.

http://www.wilderssecurity.com/

Here's a pretty big list of apps too:

http://www.spychecker.com/software/antispy.html

A lot of people have raved over Spyware Terminator, and I use to think it was something too until one day when I used it, it did not detect anything on the box when it was infected and SuperAntiSpyware detected every thing, that was the day I dumped Spyware Terminator.

There is also one other application I'd keep my eyes on called Malwarebytes' Anti-Malware.

http://www.malwarebytes.org/mbam.php

P.S. How do I know all of this? Because I've been doing this for around 10 years, I make my living in computing and I specialize in OS cleanups... :icon_pira

[Feather]

Here is your virtual pop in the eye for bumping this antique.:icon_blac

[big gizzy]

This site (http://www.antispywarereviewer.com/Product-Reviews.php) saved my comuters life. The website has great reviews regarding the top 5 (2008) Adware Removal Programs. I owe a great thanks to the people who spent their time to make this site. THANKS GUYS.

Here is the wonderful website that reviewed adware removal programs, and helped remove a little over 2000 Spyware Threats from my computer =) :

http://www.antispywarereviewer.com/Product-Reviews.php
:icon_thum

[big gizzy]

:icon_thum This site (http://www.antispywarereviewer.com/Product-Reviews.php) saved my comuters life. The website has great reviews regarding the top 5 (2008) Adware Removal Programs. I owe a great thanks to the people who spent their time to make this site. THANKS GUYS.

Here is the wonderful website that reviewed adware removal programs, and helped remove a little over 2000 Spyware Threats from my computer =) :

http://www.antispywarereviewer.com/Product-Reviews.php

[mfgbypooter]

gee wizz big gizz that's quite a load you had there.

hope you didn't get any onya.

*

[wapazoid]

... the f*ck is this?

[kippies]

... the f*ck is this?

man click the link it looks legit :icon_pira

MODS!!!!


most obvious spam ive seen in a while :green5

[wapazoid]

Oh, it's completely legit. Maybe the site will save my life!

[rebelxr8]

How to remove spyware/adware

Great advice.:icon_thum
Can anyone recommend a good xp 64 bit supporting programe

[infoseeker]

i tried long time the Spybot S & D but when i tried this SUPERAntiSpyware- damn- such a nice cleaner...

its free trial version in their website- sorry but i sucked the torrent for this ^_^