Allure Massage
Toronto Escorts

Spyware Strike

Weekly

New member
Feb 6, 2005
294
0
0
I'm having a helluva time trying to get rid of it, a pop-up, "Your computer is infected!" "Dangerous infection was detected on your PC" won't go away...
 

ggaleazz

New member
Oct 17, 2004
140
0
0
Do a search on google for ad-aware, spybot search and destroy, download and run a scan on your computer. That should fix all but the most major spyware infestations
 

MarkII

New member
Sep 22, 2004
1,904
0
0
Microsoft has a Malicious Spyware removal tool that works very well, and free.
 

Weekly

New member
Feb 6, 2005
294
0
0
ggaleazz said:
Do a search on google for ad-aware, spybot search and destroy, download and run a scan on your computer. That should fix all but the most major spyware infestations
I've tried that, Ad-Aware is useless...
MarkII said:
Microsoft has a Malicious Spyware removal tool that works very well, and free.
It's useless
 

papasmerf

New member
Oct 22, 2002
26,533
0
0
42.55.65N 78.43.73W
Try win-patrol

Does a good job of standing watch and rooting out stuff
 

WhaWhaWha

Banned
Aug 17, 2001
5,991
1
0
Between a rock and a hard place
The Goggles! They do nothing!

Try going to Spywarewarrior.com. You register and post your concerns in the forum. A mod gets back for free and advises you how to eradicate the spyware. All for free. All without reinitializing your system and losing your settings and data. First response can take 3 to 5 days. The overall removal and eradication and protection process can take some weeks from start to finish. They are good at what they do.
 

Preferred

Member
Apr 13, 2004
604
0
16
Canada
Hijackthis!

Try a very small but extremely efficient free utility called Hijackthis!
Google it. There are tutorials on their site. But be very careful & take your time. Do not delete anything that is critical.
 

ggaleazz

New member
Oct 17, 2004
140
0
0
I'm surprised Ad-Aware or Spyware didn't work as well. You may have caught a very resilian spyware program. Hijack this is very usefull if you know what you're doing and/or are very careful. Also try running msconfig (Start->Run type 'msconfig' without quotes) and look at the startup tab. Study these programs, they're all loaded up as soon as you log into windows. If you see anything that doesn't seem to belong uncheck the box beside it and reboot, you can always recheck the box if it's a program you need.

Also are you running XP with service pack 2? If so you can go into IE's tools menu and click on 'manage add on's'. Again deactivate any add on's that seem out of place.
 

cyrus

New member
Jun 29, 2003
1,381
0
0
This one can be removed, I have done it two times from my both PC's
1- you need to get you hand on some free utilities
- a registry cleaner
- a good spy ware identifier
- a utility to manage your windows start up programs
a good place to find some would be at
http://www.majorgeeks.com

run the spy ware few times and let it remove the files, write down the name
and location of all dll & exe files that insist in coming back

i.e., ipyf32.exe
ipuv.exe
apifz.dll
appfi.exe
cws.mrhop
cwsie feast
and few more . . . like that
2- reboot and bring up the windows task manager
go to the tab named processes
and identify the exe file that should not be running such as
nvsvc32.exe
wuavclt.exe
or
ipyf32.exe
highlight them & end the process

run the start up manager and remove the programs that should not be there either
i.e., . . .
nvsvc32.exe
or
ipyf32.exe

3- run the spy remover and delete all that were identified
run Windows Explorer search on
nvsvc32.exe
. .. .
and manually delete them
if you can delete them from there you may have to do it from
DOS or install another copy of windows in a different directory and delete them from there
4- make sure you also empty you recycle Bin
5- finally delete anything you don't recognize in
your
C:\ Documents and Settings \your user name \
directory
also
delete all temporary files in your Internet temporary directory

6- run the Registry cleaner and clear all the errors found
-reboot
and try again until the hard disk is cleaned

once clear do yourself a favor and
a- activate the windows xp fire wall
activate popup blocker
change your browser security to medium or high
or better yet stop using IE and start using netscape
run /install a good anti-virus on your PC
 

Cobster

New member
Apr 29, 2002
10,422
0
0
When you get the pop-up, does it also recommend you purhcase an anti-spyware program of any kind?
MSG me, since I'm not too frequent on this forum.
I can help you out.
 

bobistheowl

New member
Jul 12, 2003
4,403
3
0
Toronto
there's always the possibility that this is just a popup ad trying to get you to use their spyware cleaning software. Try right-clicking on the popup window, and selecting properties. If the file type is .gif, .jpg, or .html, that's all it is.
 

Vancouver Femme Fatale

Multihour Specialist
Apr 25, 2005
716
0
0
Vancouver
www.ironicalamour.com
It's the real deal. It's an extortion nag; basically it bugs the shit out of you with spyware infection warning messages designed to look like they are from Windows, and others that are just designed to rattle you; for instance, it puts up a window that shows your C drive files being erased, or that you're on record downloading porn - it shows a list of purported xxx files - or says that another IP is controlling your computer. However, if you read them closely, you'll notice the English is very slightly off. The upshot? If you give them the $49 or so for their 'spyware removal' apps, it'll stop bugging you. Maybe. They think it's probably of Russian origin.

The good news? I downloaded Prevx1 trial version and I *think* I might have killed the rotten thing. At least the pop-ups are gone.
 

Cobster

New member
Apr 29, 2002
10,422
0
0
did you install sp2 on your XP?
ASSUMING you're using windows xp.
 

Vancouver Femme Fatale

Multihour Specialist
Apr 25, 2005
716
0
0
Vancouver
www.ironicalamour.com
did you install sp2 on your XP?

Yep.

And for the last poster, the virus/trojan/hellbeast is called "Spyware Strike"; hence the name of this thread.

From; http://www.adwarereport.com/

Third variant of SpywareStrike Reported...

Two readers have written in to report a possible new variant of Spyware Strike that can not be removed by either PC Tools Spyware Doctor or Aluria Spyware Eliminator. This information should be confirmed by in the next 48 hours, so hold tight if these programs don't work for you.

Update (10pm): Make that two dozen people. There is definitely a new wave of Spyware Strike infections going around. Products we know that definitely DON'T work at this point at Aluria Antispyware, AdAware, Spyware Doctor, Spybot, and MS AntiSpyware. These programs will disable most components, but the annoying alert window and system tray icon remains.

Some symptoms others have reported:

* GBDialer installed (900# dialer)
* Trojan.small installed
* Internet Explorer .WMF exploit attempted


Getting rid of the zlob trojan helped; and so far, it remains killed by Prevx1.
 

Jade4u

It's been good to know ya
Weekly are you still with us? I'm just worried because I noticed you have not posted since the 24th. I hope everything is going better for you now.
 
Toronto Escorts