Guest SteveL Posted September 21, 2007 Posted September 21, 2007 I have a friend that got infected by 2 spyware's. 1) Aqware mem_watcher, I could not find any solutions on the web for this. 2) Tspy-small I have tried to run MS malware removal tool in safe mode and it does not find anything, I have tried to run Win defender in safe mode nothing. I have tried sysclean & nothing, I have tried stopzilla & nothing, I have done an online scan in safe mode w/ net support & nothing. I can not run a scan in standard mode because it reboots the system. She runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and real time protection in order for the system not to reboot. Any suggestions? I was thinking about unplugging the drive and installing it into another system and running a scan from the uninfected unit. TIA
Guest Elmo Posted September 21, 2007 Posted September 21, 2007 Re: Spyware SteveL wrote: > I have a friend that got infected by 2 spywares. > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > 2) Tspy-small > > I have tried to run MS malware removal tool in safe mode and it does not > find anything, I have tried to run Win defender in safe mode nothing. > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > done an online scan in safe mode w/ net support & nothing. > > I can not run a scan in standard mode because it reboots the system. She > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and > real time protection in order for the system not to reboot. > > Any suggestions? > > I was thinking about unplugging the drive and installing it into another > system and running a scan from the uninfected unit. > > TIA That could work.. You could also install the free Avast! which has a bootscan. The bootscan will run before Windows starts, so most malware can't get control of it. Whether Avast! will find that spyware, I'm not certain; it does some spyware along with viruses and the like. -- Joe =o)
Guest SteveL Posted September 21, 2007 Posted September 21, 2007 Re: Spyware Thanks for that thought, What I tried to do was I put in my NIS 2007 CD and booted from it which checks the memory and it found nothing, in regards to AVG can it run under save mode? I can not run any app under normal mode it reboots. Thanks "Elmo" wrote: > SteveL wrote: > > I have a friend that got infected by 2 spywares. > > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > > 2) Tspy-small > > > > I have tried to run MS malware removal tool in safe mode and it does not > > find anything, I have tried to run Win defender in safe mode nothing. > > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > > done an online scan in safe mode w/ net support & nothing. > > > > I can not run a scan in standard mode because it reboots the system. She > > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and > > real time protection in order for the system not to reboot. > > > > Any suggestions? > > > > I was thinking about unplugging the drive and installing it into another > > system and running a scan from the uninfected unit. > > > > TIA > > That could work.. You could also install the free Avast! which has a > bootscan. The bootscan will run before Windows starts, so most malware > can't get control of it. Whether Avast! will find that spyware, I'm not > certain; it does some spyware along with viruses and the like. > > -- > Joe =o) >
Guest Poprivet Posted September 21, 2007 Posted September 21, 2007 Re: Spyware SteveL wrote: > I have a friend that got infected by 2 spyware's. > 1) Aqware mem_watcher, I could not find any solutions on the web for > this. 2) Tspy-small > > I have tried to run MS malware removal tool in safe mode and it does > not find anything, I have tried to run Win defender in safe mode > nothing. > I have tried sysclean & nothing, I have tried stopzilla & nothing, I > have done an online scan in safe mode w/ net support & nothing. > > I can not run a scan in standard mode because it reboots the system. > She runs Trend Micros PC-Cillin 2007. I have to disable the spyware > scanner and real time protection in order for the system not to > reboot. > > Any suggestions? > > I was thinking about unplugging the drive and installing it into > another system and running a scan from the uninfected unit. > > TIA I wouldn't do that, unless you KNOW the other machine can and will prevent/remove the malware, or that it won't propogate into the new machine! You may end up with two infected machines if you're not careful. Pop`
Guest Elmo Posted September 21, 2007 Posted September 21, 2007 Re: Spyware SteveL wrote: > Thanks for that thought, What I tried to do was I put in my NIS 2007 CD and > booted from it which checks the memory and it found nothing, in regards to > AVG can it run under save mode? I can not run any app under normal mode it > reboots. > > Thanks > > "Elmo" wrote: > >> SteveL wrote: >>> I have a friend that got infected by 2 spywares. >>> 1) Aqware mem_watcher, I could not find any solutions on the web for this. >>> 2) Tspy-small >>> >>> I have tried to run MS malware removal tool in safe mode and it does not >>> find anything, I have tried to run Win defender in safe mode nothing. >>> I have tried sysclean & nothing, I have tried stopzilla & nothing, I have >>> done an online scan in safe mode w/ net support & nothing. >>> >>> I can not run a scan in standard mode because it reboots the system. She >>> runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and >>> real time protection in order for the system not to reboot. >>> >>> Any suggestions? >>> >>> I was thinking about unplugging the drive and installing it into another >>> system and running a scan from the uninfected unit. >>> >>> TIA >> That could work.. You could also install the free Avast! which has a >> bootscan. The bootscan will run before Windows starts, so most malware >> can't get control of it. Whether Avast! will find that spyware, I'm not >> certain; it does some spyware along with viruses and the like. Avast will install under Safe Mode. I don't remember if AVG will. -- Joe =o)
Guest Kelly Posted September 21, 2007 Posted September 21, 2007 Re: Spyware Sypware Cleaners that WORK! Line 393 - Right Hand Side: http://www.kellys-korner-xp.com/xp_tweaks.htm Or see: http://www.kellys-korner-xp.com/xp_s.htm#spy *Note: Update all (except HijackThis) before using. -- All the Best, Kelly (MS-MVP/DTS&XP) Taskbar Repair Tool Plus! http://www.kellys-korner-xp.com/taskbarplus!.htm New- SupportSpace http://www.kellys-korner-xp.com/supportspace.htm "SteveL" <SteveL@discussions.microsoft.com> wrote in message news:F4A66908-253A-4E57-BE7F-3B238ED38809@microsoft.com... >I have a friend that got infected by 2 spyware's. > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > 2) Tspy-small > > I have tried to run MS malware removal tool in safe mode and it does not > find anything, I have tried to run Win defender in safe mode nothing. > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > done an online scan in safe mode w/ net support & nothing. > > I can not run a scan in standard mode because it reboots the system. She > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner > and > real time protection in order for the system not to reboot. > > Any suggestions? > > I was thinking about unplugging the drive and installing it into another > system and running a scan from the uninfected unit. > > TIA
Guest SteveL Posted September 21, 2007 Posted September 21, 2007 Re: Spyware Good thought. "Poprivet" wrote: > SteveL wrote: > > I have a friend that got infected by 2 spyware's. > > 1) Aqware mem_watcher, I could not find any solutions on the web for > > this. 2) Tspy-small > > > > I have tried to run MS malware removal tool in safe mode and it does > > not find anything, I have tried to run Win defender in safe mode > > nothing. > > I have tried sysclean & nothing, I have tried stopzilla & nothing, I > > have done an online scan in safe mode w/ net support & nothing. > > > > I can not run a scan in standard mode because it reboots the system. > > She runs Trend Micros PC-Cillin 2007. I have to disable the spyware > > scanner and real time protection in order for the system not to > > reboot. > > > > Any suggestions? > > > > I was thinking about unplugging the drive and installing it into > > another system and running a scan from the uninfected unit. > > > > TIA > > I wouldn't do that, unless you KNOW the other machine can and will > prevent/remove the malware, or that it won't propogate into the new machine! > You may end up with two infected machines if you're not careful. > > Pop` > > >
Guest SteveL Posted September 21, 2007 Posted September 21, 2007 Re: Spyware Thanks kelly, MS antispyware does not exist anymore it is now windows defender, and I have tried spybot to no avail. I will try this other before formating and yes I will write 0000000000's to it. Thanks "Kelly" wrote: > Sypware Cleaners that WORK! > > Line 393 - Right Hand Side: http://www.kellys-korner-xp.com/xp_tweaks.htm > > Or see: http://www.kellys-korner-xp.com/xp_s.htm#spy > > *Note: Update all (except HijackThis) before using. > > > > -- > > All the Best, > Kelly (MS-MVP/DTS&XP) > > Taskbar Repair Tool Plus! > http://www.kellys-korner-xp.com/taskbarplus!.htm > > New- SupportSpace > http://www.kellys-korner-xp.com/supportspace.htm > > "SteveL" <SteveL@discussions.microsoft.com> wrote in message > news:F4A66908-253A-4E57-BE7F-3B238ED38809@microsoft.com... > >I have a friend that got infected by 2 spyware's. > > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > > 2) Tspy-small > > > > I have tried to run MS malware removal tool in safe mode and it does not > > find anything, I have tried to run Win defender in safe mode nothing. > > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > > done an online scan in safe mode w/ net support & nothing. > > > > I can not run a scan in standard mode because it reboots the system. She > > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner > > and > > real time protection in order for the system not to reboot. > > > > Any suggestions? > > > > I was thinking about unplugging the drive and installing it into another > > system and running a scan from the uninfected unit. > > > > TIA > > >
Guest PA Bear Posted September 21, 2007 Posted September 21, 2007 Re: Spyware Run a /thorough/ check for hijackware, including posting your hijackthis log to an appropriate forum. Checking for/Help with Hijackware http://aumha.org/a/parasite.htm http://aumha.org/a/quickfix.htm http://aumha.net/viewtopic.php?t=5878 http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction http://mvps.org/winhelp2002/unwanted.htm http://inetexplorer.mvps.org/data/prevention.htm http://inetexplorer.mvps.org/tshoot.html http://www.mvps.org/sramesh2k/Malware_Defence.htm http://defendingyourmachine2.blogspot.com/ http://www.elephantboycomputers.com/page2.html#Removing_Malware When all else fails, HijackThis v2.0.2 (http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use. It will help you to both identify and remove any hijackware/spyware with assistance from an expert. **Post your log to http://forums.spybot.info/forumdisplay.php?f=22, http://castlecops.com/forum67.html, http://forums.subratam.org/index.php?showforum=7, http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert analysis, not here.** -- ~Robear Dyer (PA Bear) MS MVP-Windows (IE, OE, Security, Shell/User) AumHa VSOP & Admin http://aumha.net DTS-L http://dts-l.org/ SteveL wrote: > I have a friend that got infected by 2 spyware's. > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > 2) Tspy-small > > I have tried to run MS malware removal tool in safe mode and it does not > find anything, I have tried to run Win defender in safe mode nothing. > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > done an online scan in safe mode w/ net support & nothing. > > I can not run a scan in standard mode because it reboots the system. She > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner > and > real time protection in order for the system not to reboot. > > Any suggestions? > > I was thinking about unplugging the drive and installing it into another > system and running a scan from the uninfected unit. > > TIA
Guest nass Posted September 21, 2007 Posted September 21, 2007 RE: Spyware "SteveL" wrote: > I have a friend that got infected by 2 spyware's. > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > 2) Tspy-small > > I have tried to run MS malware removal tool in safe mode and it does not > find anything, I have tried to run Win defender in safe mode nothing. > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > done an online scan in safe mode w/ net support & nothing. > > I can not run a scan in standard mode because it reboots the system. She > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and > real time protection in order for the system not to reboot. > > Any suggestions? > > I was thinking about unplugging the drive and installing it into another > system and running a scan from the uninfected unit. > > TIA Hi Steve, I think you have both a Trojans and Keyloger, it is difficult for the memwatch on how to Categories it as, because the behaviour of that Malicious program can change from one shape to another most AV vendors will list it as Trojans. Solutions; Try to paralyses the running processes for both these programs by following the instructions here: Win32/Memwatch Family http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=41597 Tspy: http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453098011 Also I will run the hijackthis to completely remove any residues left behind can resurrect the Monster back and you know when the Mummy return??. HTH. nass ---- http://www.nasstec.co.uk
Guest SteveL Posted September 22, 2007 Posted September 22, 2007 RE: Spyware I can not thank everyone enough for their suggestions and help, it is just that the person responsable for this system is doing a LLF (FKA) today, and is going to re-install all pgms and updates. Thanks again "nass" wrote: > > > "SteveL" wrote: > > > I have a friend that got infected by 2 spyware's. > > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > > 2) Tspy-small > > > > I have tried to run MS malware removal tool in safe mode and it does not > > find anything, I have tried to run Win defender in safe mode nothing. > > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > > done an online scan in safe mode w/ net support & nothing. > > > > I can not run a scan in standard mode because it reboots the system. She > > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and > > real time protection in order for the system not to reboot. > > > > Any suggestions? > > > > I was thinking about unplugging the drive and installing it into another > > system and running a scan from the uninfected unit. > > > > TIA > > Hi Steve, > I think you have both a Trojans and Keyloger, it is difficult for the > memwatch on how to Categories it as, because the behaviour of that Malicious > program can change from one shape to another most AV vendors will list it as > Trojans. > Solutions; > Try to paralyses the running processes for both these programs by following > the instructions here: > Win32/Memwatch Family > http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=41597 > Tspy: > http://www.ca.com/us/securityadvisor/pest/pest.aspx?id=453098011 > > Also I will run the hijackthis to completely remove any residues left behind > can resurrect the Monster back and you know when the Mummy return??. > HTH. > nass > ---- > http://www.nasstec.co.uk
Guest callum.macraild@virgin.net Posted September 26, 2007 Posted September 26, 2007 Re: Spyware Hi. I recently had many problems with spyware and i spent over $200 buying antispyware programmes that promised the earth and didn't deliver. Then when i thought nothing would work i came accross a website http://www.antispywaresolutions.com & i downloaded the ParetoLogic Anti-Spyware and i have never had any problems with spyware since, it removed everything the others didn't. I hope this helps anyone else who has problems with spyware. Thanks. SteveL wrote: > Thanks for that thought, What I tried to do was I put in my NIS 2007 CD and > booted from it which checks the memory and it found nothing, in regards to > AVG can it run under save mode? I can not run any app under normal mode it > reboots. > > Thanks > > "Elmo" wrote: > > > SteveL wrote: > > > I have a friend that got infected by 2 spywares. > > > 1) Aqware mem_watcher, I could not find any solutions on the web for this. > > > 2) Tspy-small > > > > > > I have tried to run MS malware removal tool in safe mode and it does not > > > find anything, I have tried to run Win defender in safe mode nothing. > > > I have tried sysclean & nothing, I have tried stopzilla & nothing, I have > > > done an online scan in safe mode w/ net support & nothing. > > > > > > I can not run a scan in standard mode because it reboots the system. She > > > runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner and > > > real time protection in order for the system not to reboot. > > > > > > Any suggestions? > > > > > > I was thinking about unplugging the drive and installing it into another > > > system and running a scan from the uninfected unit. > > > > > > TIA > > > > That could work.. You could also install the free Avast! which has a > > bootscan. The bootscan will run before Windows starts, so most malware > > can't get control of it. Whether Avast! will find that spyware, I'm not > > certain; it does some spyware along with viruses and the like. > > > > -- > > Joe =o) > >
Guest PA Bear Posted September 26, 2007 Posted September 26, 2007 Re: Spyware SPAM callum.macraild@virgin.net wrote: > Hi. > > I recently had many problems with spyware and i spent over $200 buying > antispyware programmes that promised the earth and didn't deliver. > Then when i thought nothing would work i came accross a website > hXXp://www.antispywaresolutions.com & i downloaded the ParetoLogic > Anti-Spyware and i have never had any problems with spyware since, it > removed everything the others didn't. > > I hope this helps anyone else who has problems with spyware. > > Thanks. > > SteveL wrote: >> Thanks for that thought, What I tried to do was I put in my NIS 2007 CD >> and >> booted from it which checks the memory and it found nothing, in regards >> to >> AVG can it run under save mode? I can not run any app under normal mode >> it >> reboots. >> >> Thanks >> >> "Elmo" wrote: >> >>> SteveL wrote: >>>> I have a friend that got infected by 2 spywares. >>>> 1) Aqware mem_watcher, I could not find any solutions on the web for >>>> this. 2) Tspy-small >>>> >>>> I have tried to run MS malware removal tool in safe mode and it does >>>> not >>>> find anything, I have tried to run Win defender in safe mode nothing. >>>> I have tried sysclean & nothing, I have tried stopzilla & nothing, I >>>> have >>>> done an online scan in safe mode w/ net support & nothing. >>>> >>>> I can not run a scan in standard mode because it reboots the system. >>>> She >>>> runs Trend Micros PC-Cillin 2007. I have to disable the spyware scanner >>>> and real time protection in order for the system not to reboot. >>>> >>>> Any suggestions? >>>> >>>> I was thinking about unplugging the drive and installing it into >>>> another >>>> system and running a scan from the uninfected unit. >>>> >>>> TIA >>> >>> That could work.. You could also install the free Avast! which has a >>> bootscan. The bootscan will run before Windows starts, so most malware >>> can't get control of it. Whether Avast! will find that spyware, I'm not >>> certain; it does some spyware along with viruses and the like. >>> >>> -- >>> Joe =o)
Recommended Posts