Re: HELP ! My system has been invaded by UN-invited spyware !!

From: *** (apexx@softhome.net)
Date: 06/01/02 

From: apexx@softhome.net (***)
Date: 31 May 2002 16:47:42 -0700

"Wildfire" <wildThEfire@ObViOuSdcug.co.uk> wrote in message news:<f7KJ8.6309$wH3.44802068@news-text.cableinet.net>...
> *** wrote:
>
> Hi Lee
>
> > HELP !
>
> > Is there a way to GET RID OF THE UNWANTED PROGRAMS ?
>
> Yep
>
> > I know about the "control panel" "add/remove programs" thing that
> > supposingly list out all the programs that are installed. But what I
> > am afraid is that someone may have found a way to install their
> > spyware onto people's system WITHOUT appearing on the "control panel"
> > "add/remove program" section.
>
> It is quite possible for programs not to be listed there.
>
> > If that's the case - please pardon me if I am talking nonsense here -
> > then what should I do ?
> >
> > And if the "spywares" appears on the "add/remove program" thingy
> > inside "control panel", is the deletion of the programs as simple as
> > "removing" them from that "add/remove program" thing ?
>
> If it is spyware unfortunately not however, if the software is listed there
> then you should start by removing it.
>
> > Or is there a possibility that the "add/remove program" thingy will
> > failed to truly deleting these buggers ?
>
> It should remove some of the software but the spyware will probably still be
> active on your system.
>
> Your best bet is to get a hold of adaware http://www.lavasoft.nu/ and run
> this once you've removed the program.

Thanks for your response !

This is a follow-up ....

After many hours digging and tracking through my system, I think I
found something.

The "spyware" is something from "GAIN", for "Gator Advertising and
Information Network" and it has ( at least what I can find so far )
installed TWO directories inside the "Common Files".

Suspected directory listing as follows :

    GMT <DIR> 05-31-02 3:22p GMT
    CMEII <DIR> 05-31-02 3:22p CMEII

The "GMT" directory has 51 files, 15 folders, 4.22MB (4,428,027 bytes)
in inside; While "CMEII" directory has 45 files, 9 folders, 2.74MB
(2,874,266 bytes) in it.

Under the "Start" -- "Programs", there is a listing of "GAIN", where
the "About GAIN" thing and the "GAIN website" things appear.

Now, I can go ahead and delete the two directories, and the related
listing under "Programs", but I am afraid that there are OTHER THINGS
buried under the "System" folder ( among other places ).

I need your help.

Since there are tons of system files inside the "System" and related
directories, how to know which ones are related to the spyware ?

I will go and get the "adaware" right now, I will try it out, but
really, I AM PISSED !

This is just NOT RIGHT !

I was just away from the system for the most TWO MINUTES, and the only
thing my kid brother did was hitting the <ENTER> key and this spyware
got into my system. DAMN !

Is there a way to fight back ? Is there a way to punish the assholes
who sent people spyware ?

Personally I don't think violating other people's systems like that is
right, there is NOTHING right about sneeking into other people's
system, and still lying about it .... The following I got from that
"About GAIN" thingy ...

      What is GAIN ?

      The Gator Advertising and Information Network (GAIN) helps
      keep many popular software applications and services free in
      exchange for delivering ads, information, and software based on
      the websites you view.

      GAIN offers a win-win for everyone. Companies receive a new
      source of revenue from more effective advertising, and
      consumers get free software. GAIN advertising messages are
      not associated with the websites you view.

      You can only receive GAIN messages by downloading a GAIN
      supported software product or using a GAIN supported website.

      GAIN messages come in a variety of windows. The GAIN name
      is displayed on all the windows. To view the different GAIN
      messaging windows, click here.

      To learn more about GAIN messaging or GAIN supported
      applications, click here.

Well... I am tempted to "click here", whereever the "click here"
appears, to find out WHERE THE HELL are those "GAIN supported
websites".

I surely never authorize them to install anything in my machine. I
don't need their "popular softwares", thank you very much.

What happens here is that THERE IS NO SURE WAY TO REMOVE THESE
SPYWARE. Yeah, they says, under the "Managing GAIN Messages" tab, you
need to uninstall all GAIN supported applications or give up
membership in any GAIN sponsored website.

The thing is, they never tell people HOW TO UNINSTALL their "popular
softwares" in the first place, and how trustworthy are their
"uninstall routine" ?

But anyway, I will try out the adaware thingy. Thanks for pointing
that out.

One more thing, is there a place on the Net where the entire list of
those "GAIN supported website" can be had, so to let people know WHERE
TO AVOID ?

I clicked on the "GAIN supported website" thingy, and it goes to the
following webpage:

      http://www.gatoradvertisinginformationnetwork.com/help/gainweblist.html?LOCID=gain&C=HIC_AdvertisingDT2&V=3.1.2.4

As I suspected, there is no "GAIN supported website" listed.

In other words, these "GAIN" assholes installed their "popular
softwares" into my system without ANY LEGAL MEANS ....

   1. I never used their "GAIN supported software product",

and

   2. Since there is no "GAIN supported website" to begin with,

the whole thing about installing their UNWANTED SHITTY PROGRAMS into
other people's system SHOULD BE ILLEGAL !

I am REALLY, REALLY VERY PISSED !

I clicked on their "If you want to eliminate GAIN messages" thingy,
and it comes up with the following two webpages:

   http://webpdp.gator.com/gain/about-gain-01.html
   http://webpdp.gator.com/gain/about-gain-02.html

and in the above pages, I am told that "We are presently unable to
detect any GAINware on your computer" and that's BS !

With 96 files of their spyware installed in my computer, they are
telling me that they have no "GAINware" on my computer !

And as if they want to insult my intelligence, they are telling me
that to uninstall their "GAINware", I simply go to the Add/Remove
Program icon and do the thing.

Since there is "officially" NO "GAINware" installed ( despite the 96
files they have sneaked into my system ) I don't to uninstall their
"popular softwares" !

Gimme a break !

Sorry for all my rantings. I am really furious.

Sincerely,
Lee
apexx@softhome.net

Loading