Re: Spyware on WinXP

From: taff (taff_at_the-valleys.com)
Date: 06/09/04


Date: Wed, 09 Jun 2004 00:05:45 +0100

Removal instructions are here.
http://forums.devshed.com/archive/t-145272

Taff..............

On Tue, 8 Jun 2004 08:21:06 -0700, "Phil"
<anonymous@discussions.microsoft.com> wrote:

>Hi Paul,
>
>I had installed SP1 like you sugguested and all updates afterwards. I then downloaded the free AD-AWARE software and removed all hits of spyware/adware that AD-AWARE listed. However, IE browser continues to change my homepage from MSN.com to ENJOYSEARCH.INFO after re-booting.
>
>HELP - browser hijacked!
>
>Thanks, Phil
>
>
>
> ----- pauly [MSFT] wrote: -----
>
>
> Hi Phil,
>
> Install all critical updates on Windows XP - including SP1. SP1 should be
> installed first. It will take a longer time to install, but the result will
> be fewer needed updates after SP1.
>
> After that use AdAware or Spybot Search & Destroy. McAfee is great at
> finding virus and worm forms of malware bur may not find all spyware -
> which are sometimes not classified as a virus.
>
> Also, please see the following:
>
> 320159 Home Page Setting Changes Unexpectedly, or You Cannot Change Your
> Home
> http://support.microsoft.com/?id=320159
>
> Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
> http://mvps.org/winhelp2002/unwanted.htm
>
> Dealing with Unwanted Popups:
> http://mvps.org/winhelp2002/nopopups.htm
>
> Deceptive Web Pages
> http://www3.telus.net/dandemar/decweb.htm
> [Courtesy of MS-MVP Jupiter Jones]
>
> Internet Explorer Security:
> http://securityadmin.info/noframes/faqget.asp#ie
> [Courtesy of Karl Levinson, CISSP, MCSE, MS MVP]
>
> Here are some additional steps you can take:
>
> 1. Check for Spyware that may be installed on your computer using one or
> more of these tools:
>
> Spybot-S&D
> http://www.safer-networking.org/
>
> Ad-Aware
> http://www.netsecurity.about.com/library/blfreespyware.htm
>
> HijackThis
> http://www.spychecker.com/program/hijackthis.html
>
> Web Shredder
> http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder
>
> 2. Run AV with the latest signatures to see if a virus can be found and
> removed. In addition to the AV you have installed, you should run a scan
> using one of the available online AV scanners:
>
> Trend Micro House Call:
> http://housecall.trendmicro.com/
>
> Panda ActiveScan;
> http://www.pandasoftware.com/activescan/com/activescan_principal.htm
>
> McAfee FreeScan:
> http://us.mcafee.com/root/mfs/default.asp
>
> Kaspersky Labs On-line Virus Checker:
> http://www.kaspersky.com/remoteviruschk.html
>
> BitDefender Online Scan:
> http://www.bitdefender.com/scan/licence.php
>
> Downloadable McAfee AVERT Stinger:
> http://vil.nai.com/vil/stinger/
>
> 3. Keep your machine current with Security and Critical updates using
> Windows Update:
>
> WINDOWS UPDATE:
> http://windowsupdate.microsoft.com
>
> 4. Install/Maintain your Firewall:
>
> http://www.vicomsoft.com/knowledge/reference/firewalls1.html
>
> http://firewalls.surferbeware.com/firewalls-basics.htm
>
> http://www.techonline.com/community/related_content/14208
>
> =========
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> Windows XP Security Homepage:
> http://www.microsoft.com/windowsxp/security/default.asp
>
> Windows 2000 Security Homepage:
> http://www.microsoft.com/windows2000/security/default.asp
>
> Top 10 Windows Newsgroups Security Questions:
> http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
> ups/nodepages/sectop10.asp
>
> =========
> Paul Hayes, MCSE
> Product Support Services
> Microsoft Corporation
> pauly@online.microsoft.com
>
> --------------------
> | From: "Phil" <anonymous@discussions.microsoft.com>
> | Subject: Spyware on WinXP
> | Date: Wed, 2 Jun 2004 09:05:07 -0700
> |
> | Hello, I have some sort of spyware on my PC running WinXP
> | as every time after booting up, it changes my IE browser
> | homepage to a different search engine.
> |
> | I deleted all of my temp internet files and cookies,
> | however, this did not clear the problem.
> |
> | My PC is two years old and I never did a windows upgrade.
> |
> | My question is should I do the win upgrade before
> | downloading AD-Aware's free anti-spyware program to remove
> | the spyware? I also can download McAfee Anti-virus as it's
> | free 'cause my company has a license for employee's with
> | home PCs. Would McAfee remove the spyware?
> |
> | Thanks...
> |
>
>

www.sounds-pa.com | www.thecomputerworkshop.com



Relevant Pages

  • Re: Windows Update Error on XP 64bit: update is redirected from v6
    ... In order to enable AHCI without reinstalling windows I had to pull ... under 'Reset the default security provider in Windows XP '. ... was this a clean reinstall of XP or a Repair Install? ... Microsoft Windows 2000 Operating System Group Policy Result tool ...
    (microsoft.public.windowsupdate)
  • Re: Microsoft ME
    ... > I have just found out that the Microsoft ME operating ... > long on security to ME so I can keep people from using our ... How can I force people to use a login ID and password to log into my Windows ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.security)
  • RE: Spyware on WinXP
    ... It will take a longer time to install, ... Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines ... Internet Explorer Security: ... Windows XP Security Homepage: ...
    (microsoft.public.security.virus)
  • Re: lets vote for better security
    ... : OE-related security vulnerabilities. ... But there is no requirement to install and update every 30 to 60 days on any ... your argument would require every Windows computer to ... and yet WSH is still a threat. ...
    (microsoft.public.security)
  • Re: Safe?
    ... Q1) I got an email from Microsoft about a security update. ... A1) No. Microsoft NEVER sends emails with security update attachments. ... pages where you can access Windows Update, download patches, or request ... Services to install Windows security updates or hotfixes. ...
    (microsoft.public.security)