favorites

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

each time I restart my computer and sign in internet explorer three items always
go on to my favorites list, all I never downloaded all are some sort of x-rated
one is a seardh engine and keeps going there, I have to manually remove all
and put my orginal start page in each time I start explorer. I delete them each
time, and always come back. I have Norton Pro, and adware. None of this helps
today I bought reg mechanic, thinking it would help. These three items also
are displayed in my computer program when I hit My computer. Any sugestions
before I throw this pc of crap out. Have xp
 
Surprised that Ad-Aware isn't detecting that stuff. That is what you are
using right? Ad-Aware, and not some "sounds-alike" item?

See here for the big picture:
Rogue/Suspect Anti-Spyware Products & Web Sites
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Quick and basic scans (hardly definitive, but a start)
Doxdesk parasite scan
http://doxdesk.com/parasite/
Jim Eshelmans WSC on-line quick scan
http://www.aumha.org/a/noads.htm
Bugs Glitches and Stuff-ups (Sandi Hardmeiers site...First rate all the way)
http://inetexplorer.mvps.org/Darnit.htm

More In-Depth on-line scanners for parasites and Trojans:
GFI free on-line Trojan scanner
http://www.windowsecurity.com/trojanscan/
Sygate Technologies Trojanscan
http://scan.sygatetech.com/pretrojanscan.html
PestPatrol on-line scan
http://www.pestscan.com/home.asp
SpywareChecker on-line scan
http://www.spywareguide.com/txt_onlinescan.html

Parasites, spyware malware basics:
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm

Check for Spyware - How - to's
First, install the respective programs and then update them immediately, so
that they have the current versions, and definitions. Read the Help Files
and Tutorials. Run them one at a time. With Ad-Aware you may have it
generally clean whatever it finds. The same applies for CWShredder.
Spybot S&D requires special attention (listed below), as does HijackThis
(Only more so. Details listed below) The programs are listed in order of
their general strength, safety, and purpose. It is perhaps best to install
and run these in this order of appearance. All are freeware programs,
but if you are pleased with the results and quality of the utilities,
donations
to the respective Authors are cheerfully accepted.

Ad -Aware
http://www.lavasoftusa.com/support/download/
Ad-Aware Tutorial (might help if you look through this)
http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

CWShredder (cleans all Cool Web Search malware)
http://www.majorgeeks.com/download4086.html
CWShredder Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=47

Coolwebsearch Smartkiller
http://www.safer-networking.org/files/delcwssk.zip

The above item is sometimes necessary if CWShredder detects a SmartSearch2
variant on your PC.

Spybot S&D
http://www.safer-networking.org/index.php?page=download
Spybot Tutorial (Must Read)
http://www.safer-networking.org/index.php?page=tutorial
Other tutorials for Spybot S&D (Also must read)
http://www.bleepingcomputer.com/forums/index.php?showtutorial=43
http://tomcoyote.com/SPYBOT/index1.php
http://tomcoyote.com/SPYBOT/index2.php

This item below is designed to *prevent* installation of malware and the
like by comparing known CLSID's of these "bad guys" with what is in its
definitions. By enabling a *Kill Bit* it prevents known malignant ActiveX
from being installed or run on your machine. It doesn't remove anything,
nor will it fix anything that is already in your PC. Rather, it will prevent
installation or re-installation of the item once it has been removed either
manually, or by the use of another program which will perform the duty
of removing the spyware.

SpywareBlaster (prevents installation of spyware, Trojans, etc.)
http://www.javacoolsoftware.com/spywareguard.html
SpywareBlaster Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=49

SpywareGuard (companion program to SWB, above)
http://www.javacoolsoftware.com/spywareguard.html
SpywareGuard Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=50

If you use Spybot S & D, be sure to clean *ONLY* the items displayed in
*RED*. DO NOT clean any items displayed in Black or Green at this time.

Lastly there is HijackThis. Hijack this is a very powerful, last resort type
of program which is generally best used in conjunction with help from those
who deal with the findings of the log created by the HijackThis scan. It
does nothing in the scan itself; it merely says what is in and running on
your PC. The items must be checked-marked to be "cleaned". You must
know *exactly* what you are checking-off before you proceed.
If you don't, you can quite possibly disable many useful and vital functions
of your PC. Remember; read the Tutorials, and seek help at SpywareInfo
Forums, Net-Integration, or TomCoyote forums for safety's sake.

HijackThis
http://www.spywareinfo.com/~merijn/downloads.html
If the preceding site is down, you may get HijackThis from Major Geeks
(amongst other sites as well)
Hijack This (from Major Geeks)
http://www.majorgeeks.com/download3155.html

HijackThis Tutorials **(MUST READ)**
http://www.spywareinfo.com/~merijn/htlogtutorial.html
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42
http://hjt.wizardsofwebsites.com/

Where to seek help with your HijackThis scan log
SpywareInfo Forums
http://forums.spywareinfo.com/
other help forums for HijackThis:
Net-Integration
http://forums.net-integration.net/index.php?c=19
TomCoyote
http://forums.tomcoyote.com/index.php?showforum=27

On-Line Virus scanners:

RAV AntiVirus Online Virus Scan
http://www.ravantivirus.com/scan/
Command on Demand
http://www.authentium.com/solutions/cod/index.cfm
Freedom on-line virus check
http://www.freedom.net/viruscenter/onlineviruscheck.html
TrendMicro Housecall (also detects some trojans)
http://housecall.trendmicro.com/
BitDefender Scan Online
http://www.bitdefender.com/scan/licence.php

Kapersky Online Virus Scanner
http://www.kaspersky.com/remoteviruschk.html
The above scanner works differently from most; it is a server based scanner,
and will only scan individual files, or directories which are limited to 1
MB in total size. It will not do a full system scan.

Hauri LiveCall Online virus scanning
http://www.globalhauri.com/html/products/livecall.html
The above is also server based if I remember correctly

Panda on-line virus scan
http://www.pandasoftware.com/activescan/activescan.asp
I've only used this one once or twice, and don't particularly care for it.

McAfee FreeScan
http://us.mcafee.com/root/mfs/default.asp
Don't remember if I ever used this one. Not a big McAfee fan.

Had trouble running Symantecs scanner though:

Symantec Security Check (page offers security and/or virus scan)
http://snipurl.com/7gz1


HTH -
--

LuckyStrike
(e-mail address removed)

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
--------------------------------------------------------------------
 
I should also have added the following:

~~~~~~~~~~~~~~~~~~~~~
Courtesy of Jim Byrd MS-MVP
*Most important* - Before you try to remove spyware using any of the
programs I mentioned, download a
copy of LSPFIX from any of the following sites:

http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html (if your OS is Win2k or
XP)

The process of removing certain malware may kill your internet connection.
If this should occur, this program, LSPFIX, will enable you to regain your
connection.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ok, having said that:

It is sometimes necessary to run the programs a couple of times
consecutively, as they may make one pass to clean one portion, and to
disable something which is running. (and are therefore un-removable at the
first pass, as files and programs in use cannot normally be written to,
deleted, etc.) So, run them -one at a time- at least twice.

Next: Under certain circumstances, it is advisable to run them in safe mode
to do the most efficient cleaning.
--

LuckyStrike
(e-mail address removed)

How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
http://home.satx.rr.com/badour/html/post.html
--------------------------------------------------------------------
 
Back
Top