Spyware, Viruses, & Security forum

General discussion

Welcome to S,V, & S forum; Security Tools and Removal Resources

by Donna Buenaventura / March 16, 2007 12:00 AM PDT

Welcome to Spyware, viruses, & security forum!

One of the most common questions people have is whether or not they are infected and then how they should go about fixing it. Another common question is whether they have the right security tools. Don't worry, you're in the right forum.

Getting started using this forum is extremely easy! Just follow these easy steps below to start receiving the help you need:

Step 1: Use CNET's Forum Search feature before posting. Chances are... your question may have already been discussed.

Step 2: Let us understand your needs. Kindly post your system configuration when asking for help. You may change your forum preferences too!

Step 3: Navigate by reading the FAQ and Policies before posting. These pages cover what every member should know in using the message boards.

Step 4: Please create your own topic instead of hijacking a topic created by another member.

Step 5: Read this welcome message often for we will be posting as a reply the guides, tools and utilities that will help you prevent being infected and will cure a sick PC.

Thanks and once again, welcome and enjoy your stay!

Message was edited by: admin

Discussion is locked
You are posting a reply to: Welcome to S,V, & S forum; Security Tools and Removal Resources
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Welcome to S,V, & S forum; Security Tools and Removal Resources
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Stand Up and Be Counted
by roddy32 / March 16, 2007 2:59 AM PDT

[quote="Copyright Permission"]
Corrine, for the Administrators of Malware Complaints, gives permission for this topic, in the English language or a translation to another language by a member of Malware Complaints staff, to be copied in full where required.
[/quote]

For years now . . .
. . . Users of the Internet are being plagued by websites and programs which try to
*hijack their computer,
* trick them into making high (dialing-)expenses,
* very aggressively steal passwords and banking information, and
* influence their surfing habits.

Such actions are an attempt to trick people into purchasing programs which do not work properly or not at all, can harm the affected computer, or just attempt to damage or destroy the operating system, security-programs and/or other programs.

Of course, we are talking about Viruses, Trojans, Spyware, Hijackers, Dialers, Adware and fake (malware-scanning) programs -- or Malware, in short.

Until now, people who fell victim to malware, could not do much more than try to remove it from the computer -- at times spending a lot of money to get the computer in working order again.

But that can change now!


What is Malware Complaints?
Simply put, Malware Complaints is a website forum. However, for more than one reason, it is a unique forum.

Malware Complaints is a cooperation between many anti-malware helpers and experts from all over the world. From all corners of the world, these people have joined together to make it possible for users, from whatever part of the world they come, to make their complaint against malware and the makers of it.

Malware Complaints offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.

Instead of only removing the malware (or let it be removed) and wait for the next infection, users can really stand up against the makers of malware!


What will Malware Complaints do with the complaints, which users post?
Malware Complaints collects the complaints and stories, by country/region as well as by malware-group or -family, that way creating the possibility to:
* issue petitions, which can be offered to governments and official bureaus that deal with internet security, thus making it clear to those officials how extensive the problems with malware have evolved;
* make malware-issues known to the news media, which, in turn, can make malware and their makers known to the world.
Why should victims tell their story?
Malware Complaints is doing something that malware and malware-makers absolutely do not want.

The goal of Malware Complaints is to bring malware(-makers) into the open. This exposure to the public and government officials will make it much harder for them to operate.

When malware is described by the press and rejected by politicians and/or official organizations, it can even become possible to outlaw malware and it will then be possible, for everyone, to take legal action against malware-makers.

This is the place to tell your story -> <- where you can make a difference!

________________

Inspiration Sources

Fight Back Against SpyAxe
Spyware warriors call for action
Fighting back and Making a Difference

This document is the joint effort of jahewi and Corrine.

Collapse -
How to install SpybotS&D
by Marianna Schmudlach / March 16, 2007 11:42 AM PDT
In reply to: FREE CLEANING programs

Download from Spybot S&D 1.4

Do a system-scan with Spybot 1.4:

- Open Spybot 1.4
- First, Check for updates
click the 'Search for updates'-button. If there are updates available, select them and click the 'Download updates'-button.

- Click 'Search and destroy' and then 'Check for problems'.

- Relax, while Spybot is performing it's scan.
- When Spybot is done, it will show a list of found items (or congratulate you with a clean computer). Click 'Fix selected problems' to delete the items.

- Close Spybot 1.4

Collapse -
Trend Micro standalone Sysclean "in the wild" cleaner
by Marianna Schmudlach / March 17, 2007 7:14 AM PDT
In reply to: FREE CLEANING programs

Donwload: http://www.trendmicro.com/download/dcs.asp

It is a standalone scanner and is designed to clean registries and system files from 'in-the-wild' malware infections.
Canned:

Create a folder on your desktop called Sysclean.
Go to http://www.trendmicro.com/download/dcs.asp and download sysclean package to the folder you made.
Go to http://www.trendmicro.com/download/pattern.asp and download the Official Pattern Release for windows to your desktop.
This file will be called lptXXX.zip (XXX represents the version number)
Unzip lptXXX.zip and you'll get the file lpt$vpn.XXX.
Move the lpt$vpn.XXX to that Sysclean-folder you created on your desktop.

Turn off your antivirus which is installed on your system because it can interfere with the Sysclean-scan.

Open the sysclean-folder and doubleclick sysclean.com.
Check: Automatically clean or delete detected files.
Click scan.

Collapse -
How to install CCleaner
by Marianna Schmudlach / March 17, 2007 10:08 AM PDT
In reply to: FREE CLEANING programs

Download CCleaner HERE and install it.

Before first use, check under Options, Settings, and ensure "Only delete files in Windows Temp folder older than 48 hours" is unchecked.

Then open it and select the items you wish to clean up.

In the Windows Tab:

I recommend cleaning all entries in the "Internet Explorer" section except Cookies.
Clean all the entries in the "Windows Explorer" section
Clean all entries in the "System" section
Clean all entries in the "Advanced" section.

In the Applications Tab:

Clean all except cookies in the Firefox/Mozilla section if you use it.
Clean all in the Opera section if you use it.
Clean Sun Java in the Internet Section.
Clean any others that you choose.

Then click the "Run Cleaner" button

Collapse -
How do I use Dr.Web CureIt!?
by Marianna Schmudlach / March 18, 2007 6:04 AM PDT
In reply to: FREE CLEANING programs
Doctor Web CureIT free virus remover

Dr.Web CureIT! detects and removes
* Mass-mailing worms * E-mail viruses * Peer-to-peer viruses * Internet worms * File viruses * Trojans * Stealth viruses* Polymorphic viruses * Bodiless viruses * Macro viruses * MS Office viruses * Script viruses * Spyware * Spybots * Password stealers * Paid Dialers * Adware * Riskware* Hacktools * Backdoors * Joke programs * Malicious scripts * Other malware*

How do I use Dr.Web CureIt!?
Download Dr.Web CureIt! from our web-site. Run the utility and confirm its launch by pressing the "OK" button and wait for the scanning results of the main memory and startup files. If you want to scan hard drives of your computer, select the objects for scanning in the central part of the scanner window and press "Start scanning" in the right bottom corner.
Collapse -
ON-LINE scans
by Marianna Schmudlach / March 18, 2007 6:25 AM PDT
In reply to: FREE CLEANING programs

Housecall online virus

Please run the Housecall online virus scan located at:
http://housecall.trendmicro.com/housecall/start_corp.asp
Follow the prompts to scan your hard drive for viruses. Select the "Autoclean" option so that Housecall will remove any viruses from your system.
When the scan is finished, please restart your computer.

......

Housecall (using IE with Active-X)
http://housecall.trendmicro.com/housecall/start_corp.asp

Housecall (all browsers using java)
http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php

......

Panda scan

please run the Panda scan here:
http://www.pandasoftware.com/
Panda ActiveScan on the left .
Choose to "Disinfect automatically," and follow the prompts. Delete any viruses found, and restart your computer.

......

Kasperski
http://usa.kaspersky.com/services/free-virus-scanner.php

.........

WindowSecurity trojan scan

http://www.windowsecurity.com/trojanscan/
Remove any trojans found, and restart your computer.

.....


http://www.bitdefender.com/scan/licence.php

Collapse -
F-Secure online scanner
by Marianna Schmudlach / April 30, 2008 7:59 AM PDT
In reply to: ON-LINE scans

Our Online Scanner 3.3.0 was released with a new mix of technologies.

It's *free* to use (requires Internet Explorer). Custom Scan options are possible. You can scan your entire system or a single folder.

http://support.f-secure.com/enu/home/ols.shtml

Collapse -
F-Secure Online Scanner 4.1
by Marianna Schmudlach / August 6, 2009 7:01 AM PDT

Thursday, July 16, 2009 posted by Sean @ 15:52 GMT


Our Online Scanner has been updated to include a new set of scanning engines.

Version 4.1 includes the same set as will be in our upcoming Internet Security 2010 (and the same as those of you testing ISTP).

It's compatible with versions of IE and Firefox.


Details: http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/launch/system_requirements.html?language=en&license=reject&button=unclick

and the scanner is here: http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/index.html

Collapse -
Single files UPLOADING service
by Marianna Schmudlach / March 18, 2007 6:39 AM PDT
In reply to: FREE CLEANING programs
Collapse -
Blocking Unwanted Parasites with a Hosts File
by Marianna Schmudlach / March 18, 2007 6:47 AM PDT
In reply to: FREE CLEANING programs
Collapse -
Preventive Security Programs
by Marianna Schmudlach / March 18, 2007 7:54 AM PDT
In reply to: FREE CLEANING programs
SpywareBlaster from javacool will block bad ActiveX and harmful cookies from getting on to your PC in the first place. Just download and install the program. Open SpywareBlaster, check for and download updates, then 'select all' to protect against all items checked. That's it! Just return to check for updates every couple of weeks.

IE-SPYAD adds a long list of sites and domains associated with known advertisers, marketers,and hijackers to the Restricted sites zone of Internet Explorer

Site Advisor is a browser Plug-in that assigns a safety ranking to the domains listed in your search engine results. A simple three color system is used to indicate the safety level of a website:

* Red (Warning)
* Yellow (Use caution)
* Green (Safe).

According to the Site Advisor website, 95% of websites have been tested.

A website's safety assignment is made on the basis of the following criteria:

1. Spam generated from filling out forms on the website.
2. Safety of site downloads
3. Popup advertisements and nuisance behavior encountered
4. User feedback

To install Site Advisor, just download the Plug-in for Internet Explorer or the Plug-in for FireFox
Collapse -
FREE Anti Virus programs
by Marianna Schmudlach / March 19, 2007 1:46 AM PDT
In reply to: FREE CLEANING programs
Collapse -
Temporarily Disable Real Time Monitoring Programs
by Marianna Schmudlach / March 19, 2007 2:45 AM PDT
In reply to: FREE CLEANING programs

Some security programs with active monitoring processes are known to interfere with automatic scanners .

Please turn off or disable any of the following programs you may have, before running your preliminary scans .

To disable these programs, please follow the instructions. Some of these programs will automatically restart upon reboot, so you will have to repeat these disabling steps as required. After Malware Removal is complete, you should reactivate these protective programs.

Spybot S&D (Teatimer)
Ad-Aware Ad-Watch
Spywareguard
Windows Defender
TrojanHunter Guard
Disable SpySweeper
WinPatrol
AVG Anti-Spyware (formerly ewido)
Spyware Doctor
Prevx
ProcessGuard
ZoneAlarm's OS Firewall

Collapse -
Spybot S&D (Teatimer)
by Marianna Schmudlach / March 19, 2007 2:46 AM PDT

# Run Spybot-S&D in Advanced Mode.
# If it is not already set to do this Go to the Mode menu select "Advanced Mode"
# On the left hand side, Click on Tools
# Then click on the Resident Icon in the List
# Uncheck "Resident TeaTimer" and OK any prompts.
# Restart your computer.

Collapse -
Ad-Aware Ad-Watch
by Marianna Schmudlach / March 19, 2007 2:47 AM PDT

1. Right click on the Ad-Watch icon in the system tray.
2. At the bottom of the screen there will be two checkable items called "Active" and "Automatic".

Active: This will turn Ad-Watch On\Off without closing it
Automatic: Suspicious activity will be blocked automatically

3. Uncheck both of those boxes.

Collapse -
Spywareguard
by Marianna Schmudlach / March 19, 2007 2:49 AM PDT

Right click the running icon of Spywareguard in the system tray to open the program. Then go to Menu, File, and choose Exit. It will automatically restart at next boot.

Collapse -
Windows Defender
by Marianna Schmudlach / March 19, 2007 2:51 AM PDT

# Click on "Tools"
# Click on "General Settings"
# Scroll down to "Real-time protection options"
# Uncheck "Turn on Real-time protection (recommended)"
# Click "Save"

Collapse -
TrojanHunter Guard
by Marianna Schmudlach / March 19, 2007 3:05 AM PDT

Disable TrojanHunter Guard by right clicking on the icon in your System Tray.
Make sure that the program, TrojanHunter itself, is also closed/not running.

Collapse -
Disable SpySweeper
by Marianna Schmudlach / March 19, 2007 3:08 AM PDT
Spy Sweeper version 4:

* Open it, Click Options over on the left, then Program options
* Uncheck load at windows startup.
* Over to the left, Click shields and Uncheck all there.
* Uncheck home page shield.
* Uncheck automatically restore default without notification.
* Reboot your machine for the changes to take effect.

SpySweeper version 5:

o disable SpySweeper Shields

* Open SpySweeper.
* Click Shield Settings on the right

(or Shields on the left, depending what screen you're on).

* Click Internet Explorer and uncheck all items.
* Click Windows System and uncheck all items.
* Click Hosts File and uncheck all items.
* Click Startup Programs and uncheck all items.
* Close SpySweeper.

Reboot you computer, and ensure Spy Sweeper is disabled.
Collapse -
WinPatrol
by Marianna Schmudlach / March 19, 2007 3:09 AM PDT

Right-click the running icon of Winpatrol in the system tray and choose exit. It will automatically restart at next boot.

Collapse -
CounterSpy
by Marianna Schmudlach / March 19, 2007 9:32 AM PDT

Right-click the running icon of CounterSpy in the system tray.
With your mouse, hover over Active Protection Status (This should be enabled).
A menu will slide out and then you need to right click on "Disable Active Protection".

Collapse -
AVG Anti-Spyware (formerly ewido)
by Marianna Schmudlach / March 19, 2007 9:33 AM PDT

Open AVG Anti-Spyware by double-clicking the multi-colored box emblazoned with an 'S' in the system tray.
In the 'Resident Shield' section, toggle the AVG Anti-Spyware active protection 'off' by clicking 'Change state' which will then change the protection status to 'inactive'.
If you are instructed to reboot at any time during your cleanup, AVG Anti-Spyware will prompt you as to whether you would like to "Restart the Resident Shield".
Reply 'no' and set it to 'inactive' for the duration of your cleanup.

Collapse -
Spyware Doctor
by Marianna Schmudlach / March 20, 2007 1:40 AM PDT

From within Spyware Doctor, click the "OnGuard" button on the left side.
Uncheck "Activate OnGuard".

Collapse -
Prevx
by Marianna Schmudlach / March 20, 2007 1:41 AM PDT

1. Right click on the Prevx icon in your system tray at the bottom-right corner of your screen and choose Show Management Console..
2. On the Management Console click the Protection Level drop-down menu. You will see three levels:

Maximum
Off
User Defined

3. To disable all protection set the level to Off. You will receive a prompt asking "You are about to change your security settings. Do you wish to continue?" Click Yes.
4. Click the X on the upper right hand corner to exit the Management console.

Collapse -
ProcessGuard
by Marianna Schmudlach / March 20, 2007 1:43 AM PDT

1. Right-click the blue lock ProcessGuard icon located in the system tray.
2. Uncheck 'protection enabled'
3. Click yes.

Collapse -
ZoneAlarm's OS Firewall
by Marianna Schmudlach / March 20, 2007 1:44 AM PDT

1. Go to the Program tab, then click "Main".
2. Press the first "Custom" button from the top.
3. Uncheck "Enable OS Firewall".
4. Click OK.

Collapse -
SmitfraufFix
by Marianna Schmudlach / May 7, 2007 5:51 AM PDT
In reply to: FREE CLEANING programs

This tool removes Desktop Hijack malware: AdwarePunisher, AdwareSheriff, AlphaCleaner, Antispyware Soldier, AntiVermeans, AntiVermins, AntiVerminser, AntivirusGolden, AVGold, BraveSentry, MalwareWipe, MalwareWiped, MalwaresWipeds, MalwareWipePro, MalwareWiper, PestCapture, PestTrap, PSGuard, quicknavigate.com, Registry Cleaner, Security iGuard, Smitfraud, SpyAxe, SpyCrush, SpyDown, SpyFalcon, SpyGuard, SpyHeal, SpyHeals, SpyLocked, SpyMarshal, SpySheriff, SpySoldier, Spyware Vanisher, Spyware Soft Stop, SpywareLocked, SpywareQuake, SpywareKnight, SpywareSheriff, SpywareStrike, Startsearches.net, TitanShield Antispyware, Trust Cleaner, UpdateSearches.com, Virtual Maid, VirusBlast, VirusBurst, Win32.puper, WinHound, Brain Codec, DirectVideo, EliteCodec, eMedia Codec, FreeVideo, Gold Codec, HQ Codec, iCodecPack, iMediaCodec, Image ActiveX Object, IntCodec, iVideoCodec, JPEG Encoder, Key Generator, Media-Codec, MediaCodec, MMediaCodec, MovieCommander, MPCODEC, My Pass Generator, PCODEC, Perfect Codec, PowerCodec, PornPass Manager, PornMag Pass, PrivateVideo, QualityCodec, Silver Codec, SiteEntry, SiteTicket, SoftCodec, strCodec, Super Codec, TrueCodec, VideoAccess, VideoBox, VidCodecs, Video Access ActiveX Object, Video ActiveX Object, VideoCompressionCodec, VideoKeyCodec, VideosCodec, WinAntiSpyPro, WinMediaCodec, X Password Generator, X Password Manager, ZipCodec...

Download plus instructions:

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Collapse -
SmitfraudFix download.......
by Marianna Schmudlach / January 15, 2008 2:40 PM PST
In reply to: SmitfraufFix
Collapse -
Spyware and Malware Removal Guides
by Marianna Schmudlach / July 12, 2007 12:10 PM PDT
In reply to: FREE CLEANING programs
Popular Forums
icon
Computer Help 49,613 discussions
icon
Computer Newbies 10,349 discussions
icon
Laptops 19,436 discussions
icon
Security 30,426 discussions
icon
TVs & Home Theaters 20,308 discussions
icon
Windows 10 360 discussions
icon
Phones 15,802 discussions
icon
Windows 7 7,351 discussions
icon
Networking & Wireless 14,641 discussions

Tech explained

Do you know what an OLED TV is?

CNET explains how OLED technology differs from regular TVs, and what you need to know to make the right shopping decision.