Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Update > Update error and spyware problems

Reply
Thread Tools Display Modes

Update error and spyware problems

 
 
markdevon
Guest
Posts: n/a

 
      05-21-2006
HELP,

Big problem. Homepage has been stolen by a 'security centre' trying to get
me to buy malware and other security software. Webroot Spy Sweeper has erased
some spyware but still persisting problems. Even stops me downloading
microsoft updates and any free anti spyware I have tried to download.

 
Reply With Quote
 
 
 
 
Carey Frisch [MVP]
Guest
Posts: n/a

 
      05-21-2006
A severe virus or malware attack mandates a complete "clean install".
Why? Read the following:

Viruses - I feel your pain
http://blogs.msdn.com/larryosterman/...18/159482.aspx

Clean Install Windows XP
http://www.michaelstevenstech.com/cleanxpinstall.html

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------Â*----------------

"markdevon" wrote:

| HELP,
|
| Big problem. Homepage has been stolen by a 'security centre' trying to get
| me to buy malware and other security software. Webroot Spy Sweeper has erased
| some spyware but still persisting problems. Even stops me downloading
| microsoft updates and any free anti spyware I have tried to download.

 
Reply With Quote
 
PA Bear
Guest
Posts: n/a

 
      05-21-2006
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7, or other appropriate
forums for expert analysis, not here.**
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org

markdevon wrote:
> HELP,
>
> Big problem. Homepage has been stolen by a 'security centre' trying to get
> me to buy malware and other security software. Webroot Spy Sweeper has
> erased some spyware but still persisting problems. Even stops me
> downloading microsoft updates and any free anti spyware I have tried to
> download.


 
Reply With Quote
 
Noel Paton
Guest
Posts: n/a

 
      05-21-2006
1) it's not a virus, it's adware/spyware.
2) it's not a 'severe' attack - it's a single instance (so far)
3) Larry's blog points out that the Sasser work that hit him had a
potentially unknown payload - the OP's problem is well-known and the
solution well-defined.
4) Larry was also on a Corporate Network - and I suspect that network policy
as much as anything else dictated flatten and rebuild, and he'd have had
recent backups - you neglected to ask the OP about that, and to point out
the logical consequences of a reformat.


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Carey Frisch [MVP]" <> wrote in message
news:e%...
>A severe virus or malware attack mandates a complete "clean install".
> Why? Read the following:
>
> Viruses - I feel your pain
> http://blogs.msdn.com/larryosterman/...18/159482.aspx
>
> Clean Install Windows XP
> http://www.michaelstevenstech.com/cleanxpinstall.html
>
> --
> Carey Frisch
> Microsoft MVP
> Windows - Shell/User
> Microsoft Community Newsgroups
> news://msnews.microsoft.com/
>
> ---------------------------------------------------------------------------Â*----------------
>
> "markdevon" wrote:
>
> | HELP,
> |
> | Big problem. Homepage has been stolen by a 'security centre' trying to
> get
> | me to buy malware and other security software. Webroot Spy Sweeper has
> erased
> | some spyware but still persisting problems. Even stops me downloading
> | microsoft updates and any free anti spyware I have tried to download.
>


 
Reply With Quote
 
MAP
Guest
Posts: n/a

 
      05-22-2006
Noel Paton wrote:
> 1) it's not a virus, it's adware/spyware.
> 2) it's not a 'severe' attack - it's a single instance (so far)
> 3) Larry's blog points out that the Sasser work that hit him had a
> potentially unknown payload - the OP's problem is well-known and the
> solution well-defined.
> 4) Larry was also on a Corporate Network - and I suspect that network
> policy as much as anything else dictated flatten and rebuild, and
> he'd have had recent backups - you neglected to ask the OP about
> that, and to point out the logical consequences of a reformat.


>Noel Paton (MS-MVP 2002-2006, Windows)


>Nil Carborundum Illegitemi
>http://www.crashfixpc.com/millsrpch.htm



Noel,
It's nice to see an MVP that doesn't just repeat whatever MS puts out! Carey
has been advocationg a reformat on even the simplest infection, no doubt
somebody somewhere has followed his advise needlessly.
Thank you :-)

P.S. I visited you website it's now in my favorites!

--
Mike Pawlak


 
Reply With Quote
 
Noel Paton
Guest
Posts: n/a

 
      05-22-2006
Mike
One of the reasons that the designation 'MS-MVP' exists is that MS
appreciates that they DON'T know all the answers - and that independent
voices can occasionally get things more right than they do (is anyone really
surprised at that??).
One of the consequences of this is that MS also recognise that MS-MVP's will
occasionally argue with/against each other/the party line/MS - and they are
happy for this to happen (at least that's the case so far - and I hope it
continues) - if the person gets too far out of line, then they always have
the right to strip the designation (and that's the way it should be!).

NO (sic.) MS-MVP is required to do anything except behave in a 'professional
manner' (whatever that means, by MS's lights!). Unfortunately some MVP's
seem to think that once they have the designation, they take on god-like
powers of omniscience, and omnirectitude..... it's a temptation that most
resist successfully, but....

I'm as guilty as most (and more guilty than many) for bringing my personal
preferences to these groups (do a Google search for my name with Norton
added......) - but that's par for the course. When I see someone post
stupid advice to the groups, I will pull them on it - whether it's a
first-time poster, or Bill Gates hisself (I haven't had to do that yet, but
you never know.... )

There IS a place for flatten/rebuild - especially within the corporate
environment - but a simple spyware infestation (note, I aviod the use of
'infection' for spyware!) in a SoHO environment is NOT it.

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"MAP" <> wrote in message
news:...
> Noel Paton wrote:
>> 1) it's not a virus, it's adware/spyware.
>> 2) it's not a 'severe' attack - it's a single instance (so far)
>> 3) Larry's blog points out that the Sasser work that hit him had a
>> potentially unknown payload - the OP's problem is well-known and the
>> solution well-defined.
>> 4) Larry was also on a Corporate Network - and I suspect that network
>> policy as much as anything else dictated flatten and rebuild, and
>> he'd have had recent backups - you neglected to ask the OP about
>> that, and to point out the logical consequences of a reformat.

>
>>Noel Paton (MS-MVP 2002-2006, Windows)

>
>>Nil Carborundum Illegitemi
>>http://www.crashfixpc.com/millsrpch.htm

>
>
> Noel,
> It's nice to see an MVP that doesn't just repeat whatever MS puts out!
> Carey
> has been advocationg a reformat on even the simplest infection, no doubt
> somebody somewhere has followed his advise needlessly.
> Thank you :-)
>
> P.S. I visited you website it's now in my favorites!
>
> --
> Mike Pawlak
>
>


 
Reply With Quote
 
Carey Frisch [MVP]
Guest
Posts: n/a

 
      05-23-2006
Will you provide the OP a 100% guarantee that simply
removing the offending spyware/malware files will provide
a safe system, especially if making on-line purchases with
a credit card? Nowadays, spyware/malware is very sophisticated
and will hide in the registry until opportunity strikes!

--
Carey Frisch
Microsoft MVP
Windows - Shell/User
Microsoft Community Newsgroups
news://msnews.microsoft.com/

---------------------------------------------------------------------------*----------------

"Noel Paton" wrote:

| Mike
| One of the reasons that the designation 'MS-MVP' exists is that MS
| appreciates that they DON'T know all the answers - and that independent
| voices can occasionally get things more right than they do (is anyone really
| surprised at that??).
| One of the consequences of this is that MS also recognise that MS-MVP's will
| occasionally argue with/against each other/the party line/MS - and they are
| happy for this to happen (at least that's the case so far - and I hope it
| continues) - if the person gets too far out of line, then they always have
| the right to strip the designation (and that's the way it should be!).
|
| NO (sic.) MS-MVP is required to do anything except behave in a 'professional
| manner' (whatever that means, by MS's lights!). Unfortunately some MVP's
| seem to think that once they have the designation, they take on god-like
| powers of omniscience, and omnirectitude..... it's a temptation that most
| resist successfully, but....
|
| I'm as guilty as most (and more guilty than many) for bringing my personal
| preferences to these groups (do a Google search for my name with Norton
| added......) - but that's par for the course. When I see someone post
| stupid advice to the groups, I will pull them on it - whether it's a
| first-time poster, or Bill Gates hisself (I haven't had to do that yet, but
| you never know.... )
|
| There IS a place for flatten/rebuild - especially within the corporate
| environment - but a simple spyware infestation (note, I aviod the use of
| 'infection' for spyware!) in a SoHO environment is NOT it.
|
| --
| Noel Paton (MS-MVP 2002-2006, Windows)
|
| Nil Carborundum Illegitemi
| http://www.crashfixpc.com/millsrpch.htm
|
| http://tinyurl.com/6oztj
|
| Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
| "MAP" <> wrote in message
| news:...
| > Noel Paton wrote:
| >> 1) it's not a virus, it's adware/spyware.
| >> 2) it's not a 'severe' attack - it's a single instance (so far)
| >> 3) Larry's blog points out that the Sasser work that hit him had a
| >> potentially unknown payload - the OP's problem is well-known and the
| >> solution well-defined.
| >> 4) Larry was also on a Corporate Network - and I suspect that network
| >> policy as much as anything else dictated flatten and rebuild, and
| >> he'd have had recent backups - you neglected to ask the OP about
| >> that, and to point out the logical consequences of a reformat.
| >
| >>Noel Paton (MS-MVP 2002-2006, Windows)
| >
| >>Nil Carborundum Illegitemi
| >>http://www.crashfixpc.com/millsrpch.htm
| >
| >
| > Noel,
| > It's nice to see an MVP that doesn't just repeat whatever MS puts out!
| > Carey
| > has been advocationg a reformat on even the simplest infection, no doubt
| > somebody somewhere has followed his advise needlessly.
| > Thank you :-)
| >
| > P.S. I visited you website it's now in my favorites!
| >
| > --
| > Mike Pawlak
| >
| >
|

 
Reply With Quote
 
Noel Paton
Guest
Posts: n/a

 
      05-23-2006
Nothing in life is certain - including the possibilities that his System
Recovery disks won't work as designed, or will either leave him open to
Sasser etc, and worse off than before.

I've removed many of this type of infection - and never had a repeat
occurrence from any of the people involved - they learned a lot more from
the cleaning process than a reformat would have taught them, and also
learned some of the rules of Safe Hex along the way - which helps everyone
on the internet. the person who reformats every time they hit a problem is
the one who tend NOT to modify their online behaviour - and consequently is
a danger to himself, his computer, and the rest of us.

There ain't nowhere to hide from the MkII eyeball. To upgrade from the MkI
eyeball simply get some training and experience - and keep up-to-date with
the nasties.

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Carey Frisch [MVP]" <> wrote in message
news:...
> Will you provide the OP a 100% guarantee that simply
> removing the offending spyware/malware files will provide
> a safe system, especially if making on-line purchases with
> a credit card? Nowadays, spyware/malware is very sophisticated
> and will hide in the registry until opportunity strikes!
>
> --
> Carey Frisch
> Microsoft MVP
> Windows - Shell/User
> Microsoft Community Newsgroups
> news://msnews.microsoft.com/
>
> ---------------------------------------------------------------------------*----------------
>
> "Noel Paton" wrote:
>
> | Mike
> | One of the reasons that the designation 'MS-MVP' exists is that MS
> | appreciates that they DON'T know all the answers - and that independent
> | voices can occasionally get things more right than they do (is anyone
> really
> | surprised at that??).
> | One of the consequences of this is that MS also recognise that MS-MVP's
> will
> | occasionally argue with/against each other/the party line/MS - and they
> are
> | happy for this to happen (at least that's the case so far - and I hope
> it
> | continues) - if the person gets too far out of line, then they always
> have
> | the right to strip the designation (and that's the way it should be!).
> |
> | NO (sic.) MS-MVP is required to do anything except behave in a
> 'professional
> | manner' (whatever that means, by MS's lights!). Unfortunately some
> MVP's
> | seem to think that once they have the designation, they take on god-like
> | powers of omniscience, and omnirectitude..... it's a temptation that
> most
> | resist successfully, but....
> |
> | I'm as guilty as most (and more guilty than many) for bringing my
> personal
> | preferences to these groups (do a Google search for my name with Norton
> | added......) - but that's par for the course. When I see someone post
> | stupid advice to the groups, I will pull them on it - whether it's a
> | first-time poster, or Bill Gates hisself (I haven't had to do that yet,
> but
> | you never know.... )
> |
> | There IS a place for flatten/rebuild - especially within the corporate
> | environment - but a simple spyware infestation (note, I aviod the use of
> | 'infection' for spyware!) in a SoHO environment is NOT it.
> |
> | --
> | Noel Paton (MS-MVP 2002-2006, Windows)
> |
> | Nil Carborundum Illegitemi
> | http://www.crashfixpc.com/millsrpch.htm
> |
> | http://tinyurl.com/6oztj
> |
> | Please read http://dts-l.org/goodpost.htm on how to post messages to
> NG's
> | "MAP" <> wrote in message
> | news:...
> | > Noel Paton wrote:
> | >> 1) it's not a virus, it's adware/spyware.
> | >> 2) it's not a 'severe' attack - it's a single instance (so far)
> | >> 3) Larry's blog points out that the Sasser work that hit him had a
> | >> potentially unknown payload - the OP's problem is well-known and the
> | >> solution well-defined.
> | >> 4) Larry was also on a Corporate Network - and I suspect that network
> | >> policy as much as anything else dictated flatten and rebuild, and
> | >> he'd have had recent backups - you neglected to ask the OP about
> | >> that, and to point out the logical consequences of a reformat.
> | >
> | >>Noel Paton (MS-MVP 2002-2006, Windows)
> | >
> | >>Nil Carborundum Illegitemi
> | >>http://www.crashfixpc.com/millsrpch.htm
> | >
> | >
> | > Noel,
> | > It's nice to see an MVP that doesn't just repeat whatever MS puts out!
> | > Carey
> | > has been advocationg a reformat on even the simplest infection, no
> doubt
> | > somebody somewhere has followed his advise needlessly.
> | > Thank you :-)
> | >
> | > P.S. I visited you website it's now in my favorites!
> | >
> | > --
> | > Mike Pawlak
> | >
> | >
> |
>


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
possible spyware problems Larry F Windows Update 2 07-13-2005 04:39 PM
MS Windows Anti-Spyware Disabled by Spyware Trojan SouthPawPhilly Windows Update 3 02-12-2005 02:07 PM
Has Anyone Encountered Sytem problems due to Spyware? avalanche44 Windows Update 1 12-04-2004 02:59 AM
MS-OS Spyware Problems avalanche44 Windows Update 2 12-04-2004 02:51 AM
ME-OS Spyware problems avalanche44 Windows Update 0 12-02-2004 05:39 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59