about spyware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hello sir!
i am using windows defender antispyware(currently).i tried ad personal
spyware, spybot , yahoo antispyware,advanced spyware.in fact i used all of
them in same time.i scan my computer using the above antispyware.i am
confused on the results.each one is giving differently.windows defender
stating my computer is running normally.others r showing some adware,
spyware.after my friend advice i am now using only 1 anti spyware(windows
defender).is that previous usage of too many antispyware affected my
computer?now i am getting unnessecary popups like free anti virus scan.how
should i avoid it?presently defender is saying computer is running
normally.but why the popups are arising.what should i do?
 
Hi kalyan! I'm just another user like you, but I do not believe there are
any conflicts or problems caused by using Ad AwareSE, Spybot S&D, or Yahoo
AntiSpy along with Defender. I do not know what Advanced Spyware is, but if
you are getting unwanted pop ups to run an Antivirus scan or an antispyware
scan, you have a malware infection that none of your tools can detect. It may
be bundled with a trojan downloader, perhaps the Vundo trojan. I suggest you
review the removal procedures at the following websites. If you follow their
links to determine what infection your PC has, then you can follow their
removal instructions and download needed removal utilities. You did not say
what program was being offeredin the pop ups. The name being offered
sometimes helps determine which malware is present.
http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal
broadband »Vundo/Winfixer/Virtumonde removal:
http://www.dslreports.com/faq/13619
If you cannot tell from reviewing these websites which procedure to use,
then I recommend submitting a HijackThis log for analysis and get removal
instructions from a HJT forum, such as:
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html
http://www.atribune.org/forums/index.php?s=63dc4e132db5b1f99ccf87234335ea39&showforum=9
http://www.atribune.org/
http://forums.us.dell.com/supportforums/board?board.id=si_hijack
 
I don't agree with the advice to use only one antispyware product. It would
be nice if that were possible, and it would help avoid the kind of confusion
that you are experiencing about what to believe, but in the current state of
things, I don't think it is the right advice.

I believe that your machine is probably still infected with a piece of
spyware which for whatever reason Windows Defender seems to be blind to.
I've seen this one myself first hand, so I know how perplexing it is to see
the popups and have Windows Defender (and other's--Ewido, for example--tell
you that the machine is clean.

Here's what I would do:

1) Download some additional tools:

F-Secure's Blacklight root kit removal tool:

http://www.f-secure.com/blacklight/try.shtml

2) Ewido:

http://www.ewido.net/en/

(These are both tools from reputable vendors. F-secure makes excellent
antivirus tools, and Ewido is now a part of Grisoft--the folks who have
brought individuals free antivirus protection for some years now.)

Install Ewido, and update its definitions. If you want to run a scan with
it you could, but you might wait a bit--see below.

I'd recommend running Blacklight first. If it finds hidden objects, there
may be a large number of them. Concentrate on executables --.exe and .dll
files. I can't remember the terminology for what it allows you to try to do
with them--but basically have it block or rename or whatever it can do--each
bit of executable code it finds. There may be hundreds of data files of one
kind or another--just ignore those--it takes much too long to make the
individual choices needed in the interface.

Write down the filenames and paths involved--you may need to go to those
locations later and delete what is left by hand.

Once you've told Blacklight to do whatever it can do, restart Windows in
safe mode.

Once started in safe mode (and hopefully after Blacklight has prevented the
malware from restarting)--do scans with Ewido and Windows Defender, and lets
see whether they find and remove what is left.

Once you've done those scans, see whether they have removed the items that
Blacklight found. You may want to use Explorer to go to the locations you
wrote down from Blacklight's findings, and delete any folders found.

This is a pretty vague description, I think. If you aren't confident about
working with these tools, you can call Microsoft PSS for direct help with
viruses or security patch. If you are in the United States or Canada, you
can call 1-866-pcsafety. In other parts of the world, equivalent free help
is available, but the cost of the phone call may not be free---call your
local Microsoft subsidiary, or the number for paid support in your locale.

--
 
Back
Top