Re: AdWare/Spyware

From: Malke (malke_at_nospoonnotreally.com)
Date: 08/04/04


Date: Wed, 04 Aug 2004 05:38:38 -0700

Puzzled wrote:

> My latest virus scan with Norton Antivirus 2004 showed
> some 200 AdWare *.dll files. I have tried to delete them,
> but could not. Is there any way/or program to sweep those
> things out? Norton identifies them as "threat", but is
> not willing to get rid of them. Why?

NAV alone is not enough to remove spyware. It may flag the files, but it
isn't the best tool for non-viral malware. Here are some general
instructions:

Remove spyware with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. Please read the
instructions carefully. Also, make sure you've visited Windows Update
and applied all security patches. Do not install driver updates from
Windows Update. Make sure you are running a firewall.

Malke

-- 
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"


Relevant Pages

  • Re: SHELL.DLL
    ... > disable the service in Safe Mode and do all the "normal" spyware ... Unfortunately, CWShredder ... > Please read the instructions carefully and do not post your HijackThis ... make sure you've visited Windows Update ...
    (microsoft.public.windowsxp.general)
  • Re: SHELL.DLL
    ... disable the service in Safe Mode and do all the "normal" spyware ... Unfortunately, CWShredder ... Please read the instructions carefully and do not post your HijackThis ... make sure you've visited Windows Update ...
    (microsoft.public.windowsxp.general)
  • Re: SP2 doesnt allow some programs to run
    ... remove spyware with Spybot Search & Destroy ... If you are running Windows ME or XP, you should disable/enable System ... the most recent System Restore point from the More ... Do not install driver updates from Windows Update; ...
    (microsoft.public.windowsxp.general)
  • Re: INTERNET EXPLORER / WEB SITE DIRECTORY
    ... You probably have spyware on your computer. ... Scan with a current antivirus program (meaning a version not earlier ... You may also want to run CWShredder and HijackThis ... you've visited Windows Update and applied all security patches. ...
    (microsoft.public.windowsxp.general)
  • Re: strange virus/spyware
    ... It looks like some form of spyware I guess. ... Although CWShredder is no longer being updated, ... I find a combination of HijackThis and AdBuster ... Do not install driver updates from Windows Update. ...
    (microsoft.public.security.virus)