Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Same spyware showing up everday on scans


  • Please log in to reply
8 replies to this topic

#1 roe727

roe727

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:03:59 AM

Posted 21 January 2010 - 11:03 AM

Hi,

I'm having a problem I was hoping someone could advise on. When I run Malwarebytes on my computer it comes up clean. But when I run Spybot I get spyware like Right Media, Zedo, Mediaplex, FastClick, BurstMedia, Coremetrics, DoubleClick, Web Trends live. I run the fix selected problems, but when I run it the next day they seem to be back. I am also having a problem on the desktop where I can't drag things to the recycling bin or to a folder....to get things to the recycling bin I have to right click and say delete and send it to the bin that way, but I can't drag anything into folders. Any advise I would appreciate.

Thanks,
Rosemary

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:59 AM

Posted 22 January 2010 - 04:51 PM

Please download hosts.zip and save it to your Desktop.
Be sure to read and print out these Install Instructions with screenshots for the MVPS HOSTS File if you need them.
  • Extract (unzip) the file to its own folder C:\hosts. (click here if you're not sure how to do this. Vista users refer to these instructions.)
  • Open up the hosts folder and double-click on the mvps.bat file to run the script.
  • When running the mvps.bat file you may see a DOS window indicating the Previous version was saved and renamed...Press any key to continue...
  • Press any key and the DOS windows will close.
  • The script will rename your present HOSTS file to HOSTS.MVP and copy the new HOSTS file to the correct location on your system.
  • If any installed security programs provide an alert about changes to the HOSTS file, allow the change.
  • You can read more about what we are doing in Blocking Unwanted Parasites with a Hosts File.
  • Vista users be sure to read Updating the HOSTS file in Windows Vista.
Note: You may have to overwrite the hosts file in "Safe Mode" if you get "an access denied message" when trying to do it in normal mode.

Please download TFC (Temp File Cleaner) by Old Timer and save it to your desktop.
alternate download link
  • Save any unsaved work. TFC will close ALL open programs including your browser!
  • Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator.
  • Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
  • TFC will clear out all temp folders for all user accounts (temp, IE temp, Java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder.
  • Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.
Note: It is normal for the computer to be slow to boot after running TFC cleaner the first time.

Then download and install SpywareBlaster. Click on Updates, then the Check for updates button. If any are found, download them all and click Enable Protection for All Unprotected items when finished.

I also recommend using ZonedOut which is a complete Internet Explorer Security Zone Manager that allows you to add a more extensive list of sites and domains associated with known spyware, advertisers and marketers to the Restricted Sites Zone.Note: If you use Spybot, SpywareBlaster and IE-SPYAD for ZonedOut together, there is some overlap of protection. Each one offers a different list but they are not completely identical. Thus, if you undo or disable the protection in one product, it may remove some of the protection installed by the other. You should re-immunize or re-enable the protection in the other products as appropriate.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 roe727

roe727
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:03:59 AM

Posted 24 January 2010 - 12:41 PM

I did all of the above. I guess now I have to wait and run Spybot later today or tomorrow and see if I am still getting the same spyware showing up.

Thank you and I'll let you know how that goes!
Rosemary

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:59 AM

Posted 24 January 2010 - 01:31 PM

You're welcome and good luck. If you continue to have issues with malware, post back.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 roe727

roe727
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:03:59 AM

Posted 24 January 2010 - 07:58 PM

Ok....A few things. I use Yahoo mail and none of the ads show up now. Not that I need them, but something new since I ran these. Also....I ran spybot and came up with Microsoft.windowssecuritycenter.antivursoverride???

Rosemary

#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:59 AM

Posted 24 January 2010 - 10:30 PM

Microsoft.WindowsSecurityCenter.AntiVirus.Disable.Notify
Microsoft.WindowsSecurityCenter.Firewall.Disable.Notify
Microsoft.WindowsSecurityCenter.UpdateDisable.Notify
Microsoft.WindowsSecurityCenter.FirewallOverride
Microsoft.WindowsSecurityCenter.AntiVirusOverride

If you see any of the above, they are warnings from Spybot that the Windows Security Center alerts (which normally warn you if your anti-virus and firewall have been turned off or disabled), have been unchecked so that they will not warn you. Spybot looks for such Security Risks and when it finds them, it brings to your attention that someone or something disabled one or more of the notifications in the Windows Security Center. If you turned them off intentionally so as not to be alerted, then you can have SpyBot just ignore them. If you did not turn them off, then further investigation is needed.

You can confirm this by going to Start > Control Panel and double-clicking on Security Center.
  • Under Resources, on the left-hand side, you will see five options.
  • Click on the last one "Change The Way Security Center Alerts Me" and you will find three choices.
  • If there are no check marks in the boxes, that means that the alerts have been turned off and that is the cause of Spybot's detections.
If you highlight any of these detections with your mouse, Spybot will give you the full description. Keep in mind that a disabled Security Center does not necessarily mean malware. If you have another security program like McAfee Security Center or Norton Internet Security installed, they can also disable the Windows Security Center in order to take care of (manage) things themselves. That's why tools like Malwarebytes Anti-Malware and Spybot will only alert you about the disabled status and then its up to you to investigate further.

For more information on these alerts, please refer to:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 roe727

roe727
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:03:59 AM

Posted 25 January 2010 - 07:50 AM

Thank you so much for clearing that up. Makes perfect sense!!

Rosemary

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,056 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:59 AM

Posted 25 January 2010 - 09:06 AM

You're welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 roe727

roe727
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:03:59 AM

Posted 25 January 2010 - 06:33 PM

I have a question. Do you have any idea why the ads wouldn't show up in my yahoo mail since I ran these programs?

Rosemary




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users