|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
spyware
#8313075 - 04/22/08 01:44 AM (15 years, 10 months ago) |
|
|
originally posted in computers and technology, but with only 2 viewing i may not get answers.
i have spyware on my computer that keeps coming back over and over. I have cleaned my pc probably 100 times. i was using avg, but now im using spyware doctor. regardless it keeps coming back.
biggest problems
adware.2020.search Fake.trojan.alert trojan.2nd thought_com
these are the high risks the others are low. any ideas??
--------------------
|
deXtrous
complete tool
Registered: 04/24/06
Posts: 1,743
Loc: Australia
Last seen: 11 months, 15 days
|
Re: spyware [Re: highc]
#8313079 - 04/22/08 01:46 AM (15 years, 10 months ago) |
|
|
Run your PC in safe mode and run the anti-virus then..
explanation: the spyware is made to recreate itself upon deletion from a different location, running in safe-mode will block this process from happening. (HOPEFULLY)
Edited by deXtrous (04/22/08 01:47 AM)
|
0xYg3n
topdawg
Registered: 04/29/04
Posts: 18,881
Last seen: 14 years, 11 months
|
Re: spyware [Re: highc]
#8313080 - 04/22/08 01:46 AM (15 years, 10 months ago) |
|
|
spyware doctor sucks.
try running adaware and spybot S&D in safe mode. if that doesn't fix things you might need to use norton or mcafee. You said you tried avg, though?
|
JonnyOnTheSpot
Sober Surfer
Registered: 01/27/02
Posts: 11,527
Loc: North Carolina
|
Re: spyware [Re: highc]
#8313090 - 04/22/08 01:51 AM (15 years, 10 months ago) |
|
|
i use spy sweeper from webroot and i never have any problems. most of it is knowing what not to click or open though. spy sweeper is about $50 bucks a year and is worth it imo.
|
Bandersnatch
Frumious
Registered: 08/10/07
Posts: 768
|
Re: spyware [Re: 0xYg3n]
#8313091 - 04/22/08 01:52 AM (15 years, 10 months ago) |
|
|
Quote:
0xYg3n said: spyware doctor sucks.
try running adaware and spybot S&D in safe mode. if that doesn't fix things you might need to use norton or mcafee. You said you tried avg, though?
Do that and you also may need to clean up the registry by hand. If there are any weird site names or file names related to those things you mentioned search your registry for them.
Usually virus/spyware/adware removal programs don't clean ALL of that up in my experience.
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
|
thanks all but...
1. Not paying for virus and spyware removal. So i need a free one. Unless it comes down to it, then i'll buy. but prefer not to especially with torrents and all.
2. How do you put in safe mode. like f8 or sumthin.
3. had mcafee at first but it didn't even say anything.
4. i jus did a sweep and have backdoor agents. DirectX dialers, adware, spyware, and trojans. It also says i have infected registry values and keys.
--------------------
|
0xYg3n
topdawg
Registered: 04/29/04
Posts: 18,881
Last seen: 14 years, 11 months
|
Re: spyware [Re: highc]
#8313117 - 04/22/08 02:04 AM (15 years, 10 months ago) |
|
|
if avg isn't working and you don't want to buy something, there is always the illegal way...
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
Re: spyware [Re: 0xYg3n]
#8313120 - 04/22/08 02:06 AM (15 years, 10 months ago) |
|
|
Quote:
0xYg3n said: if avg isn't working and you don't want to buy something, there is always the illegal way...
yeah everything on my computer is illegal. shhhhhhh.... but i have bought shit in the past and it really didn't work. Top names to. went to best buy and got some virus shit that the government apparently use....bs
--------------------
|
JonnyOnTheSpot
Sober Surfer
Registered: 01/27/02
Posts: 11,527
Loc: North Carolina
|
Re: spyware [Re: highc]
#8313123 - 04/22/08 02:07 AM (15 years, 10 months ago) |
|
|
Quote:
highc said: thanks all but...
1. Not paying for virus and spyware removal. So i need a free one. Unless it comes down to it, then i'll buy. but prefer not to especially with torrents and all.
2. How do you put in safe mode. like f8 or sumthin.
3. had mcafee at first but it didn't even say anything.
4. i jus did a sweep and have backdoor agents. DirectX dialers, adware, spyware, and trojans. It also says i have infected registry values and keys.
whatever man. enjoy your "adware, spyware, and trojans" or protect your damn computer.
maybe stop opening those "inspiring" and "hysterical" emails your weird aunt keeps sending to you too...
|
JonnyOnTheSpot
Sober Surfer
Registered: 01/27/02
Posts: 11,527
Loc: North Carolina
|
Re: spyware [Re: highc]
#8313127 - 04/22/08 02:09 AM (15 years, 10 months ago) |
|
|
actually, it sounds like you're pretty much just fucked. so just reformat your hardrive. then quit clicking on donkey fucking porn pop-ups and you should be ok.
|
StonedShroom
OG shroomerite
Registered: 10/21/00
Posts: 10,876
Last seen: 8 months, 18 days
|
Re: spyware [Re: highc]
#8313138 - 04/22/08 02:11 AM (15 years, 10 months ago) |
|
|
avast.
download it.
that's all I have to say
-------------------- We are not human beings going through a temporary spiritual experience. We are spiritual beings going through a temporary human experience.
|
deXtrous
complete tool
Registered: 04/24/06
Posts: 1,743
Loc: Australia
Last seen: 11 months, 15 days
|
|
Listen you need not buy anything.
projectw.org is a very good wares site where you can literally find any cracked software.
|
StonedShroom
OG shroomerite
Registered: 10/21/00
Posts: 10,876
Last seen: 8 months, 18 days
|
Re: spyware [Re: deXtrous]
#8313181 - 04/22/08 02:27 AM (15 years, 10 months ago) |
|
|
avast is free. and good.
-------------------- We are not human beings going through a temporary spiritual experience. We are spiritual beings going through a temporary human experience.
|
Bandersnatch
Frumious
Registered: 08/10/07
Posts: 768
|
|
Bitdefender is pretty decent. Also Windows defender if you have a legal copy of Windows.
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
|
Quote:
JonnyOnTheSpot said: actually, it sounds like you're pretty much just fucked. so just reformat your hardrive. then quit clicking on donkey fucking porn pop-ups and you should be ok.
shit...is that what did me dirty. Them donkey porns. I should have known.
so how do you run in safe mode im still tryna do that. i know you have to hit something on startup. i have Windows XP 2007 i think
--------------------
|
blewmeanie
Registered: 10/01/06
Posts: 28,984
Loc:
|
Re: spyware [Re: highc]
#8313514 - 04/22/08 07:44 AM (15 years, 10 months ago) |
|
|
Restart your computer, and then press f8 as everything is starting up.
|
polyflakes
free thinker
Registered: 03/27/08
Posts: 506
Last seen: 22 minutes, 33 seconds
|
|
yes avast works great and its free i have used it on my last two computers with no problems. also check for "adaware SE personal " thats a good free spyware program that i use .
hope this helps
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
|
are you sure F8 cause i think i remember that. i started it once trying to fix a problem. at the bottom it says hit F8 or another button to bring up settings and shit. But i don't believe their to be a safe mode option.
--------------------
|
blewmeanie
Registered: 10/01/06
Posts: 28,984
Loc:
|
Re: spyware [Re: highc]
#8313530 - 04/22/08 07:55 AM (15 years, 10 months ago) |
|
|
Yes it is f8.
You can also do it without restarting first by clicking Start, Run and then typeing MSCONFIG, and clicking OK
When the system configuration utility appears, go to the BOOT.INI tab, Check the "/SAFEBOOT" option, and then click OK and Restart your computer when prompted.
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
|
well i aint got shit to lose. My computer is all slow and shit. I keep getting pop-ups taking me to all these security sites, trying to get me to buy shit.
another weird thing when i go to google and put in lets say blunt wraps (it can be anything really.) the search results come up normally.
But anytime i click one of the results it takes me to a different website. sometimes e-bay or a car website. differs with each click.
I have to hit the Cached button underneathe to see website without problems..
--------------------
|
blewmeanie
Registered: 10/01/06
Posts: 28,984
Loc:
|
Re: spyware [Re: highc]
#8313551 - 04/22/08 08:08 AM (15 years, 10 months ago) |
|
|
Yeah sounds like its time to wipe your drive and start over fresh.
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
|
i have 3 times. I have the windows recovery disk which is suppose to make the computer come with just factory settings. The first thing i do when i start the computer for the first time is get protection. Last time i got Kaspersky ran scan and came up dirty with the same shit i tried to rid of.
--------------------
|
blewmeanie
Registered: 10/01/06
Posts: 28,984
Loc:
|
Re: spyware [Re: highc]
#8313559 - 04/22/08 08:11 AM (15 years, 10 months ago) |
|
|
Nah fuck the recovery disk, format your hard drive and start over with a fresh (legit) OS.
|
blewmeanie
Registered: 10/01/06
Posts: 28,984
Loc:
|
|
1 Never click on pop ups 2 Always use firefox 3 Dont download random files if you dont know the source, 4 Always stay behind a firewall 5 Always run good antivirus software (I like Norton, and McAfee).
Do this, and you will be fine in the future.
|
Gill
Registered: 10/18/07
Posts: 511
Last seen: 5 years, 11 months
|
Re: spyware [Re: highc]
#8313570 - 04/22/08 08:17 AM (15 years, 10 months ago) |
|
|
You might have to hit F8 over and over again right as you turn the computer on, but you should get a black or blue prompt screen from which you can choose to boot in safe mode or reformat.
Also, most infected registry values tend to hide in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run or \CurrentVersion\Internet Settings. If all else fails, poke around and remove anything that's obviously not meant to be there. You can access the registry editor by going Start > Run > "regedit" > OK. Just be especially careful not to delete the wrong thing.
I couldn't find any specific values to remove for fake.trojan.alert or trojan.2nd thought_com. Google turned up nothing solid on these threats (in fact, this thread was the among the first search results for those two names). Because of that, those two probably aren't causing as many problems as the adware.2020.search. Search for each one of these values and remove as you see them. These probably won't ALL be there. They're just known values associated with it.
Quote:
adware.2020.search When the Adware is executed, it creates the following Registry entries: • ..\software\2020installation • ..\SOFTWARE\Classes\2020search2.2020search2 • ..\Software\Classes\clsid\{0007522a-2297-43c1-8eb1-c90b0ff20da5} • ..\SOFTWARE\Classes\clsid\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} • ..\Software\Classes\clsid\{fc2493d6-a673-49fe-a2ee-efe03e95c27c} • ..\Software\Classes\clsid\{fc3a74e5-f281-4f10-ae1e-733078684f3c} • ..\Software\Classes\downloader.downloader • ..\Software\Classes\downloader.downloader.1 • ..\Software\Classes\gorsdn.contextitem • ..\Software\Classes\gorsdn.contextitem.1 • ..\Software\Classes\interface\{02cb16d1-4ca7-47ff-8546-c5e925df33d6} • ..\Software\Classes\typelib\{48da6120-a779-4c12-8584-47b625efb469} • ..\Software\Classes\typelib\{e306b3c1-3c68-4efa-9ebc-0b99c6a918c2} • ..\software\microsoft\windows\currentversion\moduleusage\%ROOT%/windows/downloaded program files/2020search.dll • ..\software\microsoft\windows\currentversion\uninstall\2020search2 • ..\software\microsoft\windows\currentversion\uninstall\2020searchtb • ..\Software\srng
Hope that helps.
|
highc
creator
Registered: 08/31/07
Posts: 3,592
Loc: maryland
Last seen: 7 years, 4 months
|
Re: spyware [Re: Gill]
#8313580 - 04/22/08 08:21 AM (15 years, 10 months ago) |
|
|
when this first all happened i looked through all my files for the infected files and removed some. Never was good with computers in a technical sense. I'm gonna go ahead try to run in safe mode run a couple scans and see what happens.....
thanks all
--------------------
|
|