Forum Home
Press F1
 
Thread ID: 56426 2005-04-04 10:45:00 Please Help, this spyware is relentless!!! MasturJeff (7803) Press F1
Post ID Timestamp Content User
341679 2005-04-05 09:54:00 Umm, you cant really back up programs, (if theyre already installed),expecting to copy them to the same hdd later (if u format) to work later coz they wont work. Sorry, I meant as in pre installed (when I d/l a programme I always keep a copy of the zipped or install file)

By the way, did you ever get round to doing a system restore, back to before this problem began?
Myth (110)
341680 2005-04-05 10:20:00 Sorry, I meant as in pre installed (when I d/l a programme I always keep a copy of the zipped or install file)

By the way, did you ever get round to doing a system restore, back to before this problem began?

No, I haven't tried system restore yet... shoudl I?
MasturJeff (7803)
341681 2005-04-05 10:30:00 ok i'm gonna try and do a system restore from a few days ago before this mess happened. MasturJeff (7803)
341682 2005-04-05 10:35:00 After 3 or so days it may be worth a shot

At this stage you have nothing to lose

Try it :)
Myth (110)
341683 2005-04-05 10:58:00 After 3 or so days it may be worth a shot

At this stage you have nothing to lose

Try it :)

I did system restore and everything was exactly the same as before I did it. :eek:
MasturJeff (7803)
341684 2005-04-05 11:09:00 I did system restore and everything was exactly the same as before I did it.

Before you did the system restore, or before you got this virus/trojan?

If its the same as it was an hour or two ago (just before the system restore attempt), might I suggest you start backing up your data
Myth (110)
341685 2005-04-05 11:31:00 If you followed Speedy's instructions you will not have any restore points to go back to. If you didn't follow his instructions re turning System Restore off, therein lies, in part, you continuing problems. Catch 22, maybe.

Has MSN been patched? If not, stay away from it, it has several nasty issues that are being exploited at the moment.

If you are going to have any chance of resurrecting your OS, without a format and reinstall, you need to disable, turn off or uninstall all uneeded software. Use msconfig (startup tab, kill all that aren't essential MS startups) (www.pacs-portal.co.uk), Task Manager (Applications and System processes). You need one antivirus installed only, one firewall installed only, you can have several anti-spyware programmes but stick to the ones recommended in the PF1 security FAQ's (pressf1.pcworld.co.nz) with the addition, perhaps, of MS Anti-spyware. Get the latest version of any security/anit-malware programmes and do not run them until you have updated them with the latest patches and definition files.

Uninstall Maxthon, then go into IE's properties and apply the most stringent security settings. Install an up to date version of Firefox, Opera, Mozilla or whatever but, do not install IE with new clothes, they're still buggy for the most part. Go to this site (www.blackviper.com) and follow the instructions for shutting off unnecessary Services (make sure you are on the right page for your OS and Service Pack, eg XP SP2). Clean out every temp file, cache you can lay your hands on, give the registry a good clean (see PF1 Maintenance FAQ's).

If necessary (recommended) use some one elses "secure" computer to get the latest security app's and updates (including Windows Service Packs & IE + SP's, you want to be as invulnerable as possible even if you can't help using some app's) and to visit the above links and those posted by others. Get fresh, secure copies of everything.

Back up your data, forget about installed programmes (reinstall them). You can back up the Zip's and EXE's but, only for those programmes you absolutely need and only programmes from trusted sources. Do not use anything from P2P or chat (MSM comes to mind) from online offers/specials, game/software mods or game/software mod sites, misic or movie sites.

Do everything you possibly can in safe mode and while disconnected from the net or a network. Don't keep popping back into Normal mode to see how things are going until you have completed all tasks mentioned here and previously by others. Do not turn System Restore back on until you know for sure you are clean (if your efforts fail you'll be formatting anyway).

I sympathise re Nortons IS, I loaded a trial of this "malware" a few years back, it took weeks to erradicate the last vestages of it from my system. I thought Norton's/Symantic had stopped engaging in crappy marketing ploys like that, obviously not though. Do your best with it, IIRC, it's not all in the registry that caused my problems, you have to check file properties to figure out which ones to kill.

Good luck
Murray P (44)
341686 2005-04-05 11:38:00 I did system restore and everything was exactly the same as before I did it. :eek:

If everything is now back to normal via System Restore, follow the instructions for cleaning out temp, cache and registry. Uninstall your browser and set IE's security. Turn off unnecessary Windows Services and get rid of the estranious antivirus programmes. Updtae all you security programmes and don't download ones that are not known and well respected. Back up your data and, don't do what you did to get infected in the first place, second chances are only any good if they are appreciated.

:thumbs:
Murray P (44)
341687 2005-04-05 12:10:00 You're still running 3 AV Apps
and you aren't really listening to any of the advice others have been posting
bartsdadhomer (80)
341688 2005-04-05 20:03:00 You're still running 3 AV Apps
and you aren't really listening to any of the advice others have been posting

It's actually 2, I tried to uninstall the Norton Security stuff, but it won't go away... :annoyed:
MasturJeff (7803)
1 2 3 4 5 6 7 8 9 10 11