Getting rid of adware/spyware.

Serena

Administrator
I mentioned this to a few people in the past week and told them I've been using Ad-Aware (the free version), which is recommended in this article. As I tend to do a lot of searching on the internet, both for work and for personal use, I find I end up with a lot of spyware. Depending on how often I've been on the computer, I'll run the Ad-Aware every other day or so to catch and delete these. He also recommends PanicWare's free "Pop-Up Stopper", which I always have in use. Very few pop-ups ever make it through. It's great! If you have any questions about how to download these or use them, let me know.

Programs: Stripping Adware/spyware from PC Can Be Tricky
Sat 7 February, 2004 14:06
By Gene Emery

PROVIDENCE, R.I. (Reuters) - One of the biggest challenges a computer owner can face is getting rid of adware or spyware, programs that can sneak onto your PC when you agree to download free utility software from the Web.

In addition to monitoring your activity on the Internet, adware and spyware can lock you into an unwanted home page and swamp you with pop-up advertisements.

Removal can be difficult because the designers of such programs often try to keep them out of sight on your PC.

Most don't show up on the "Add/Remove Programs" list in the Windows control panel. They seldom offer an "Uninstall" option in the Windows "Programs" list; in fact, they're seldom listed at all.

Even when you identify them, some adware programs can't be removed directly because they are tied to other unrelated utility programs you may have wanted.

If you're a do-it-yourselfer, there are ways to get rid of the programs. The first step: Go to sites such as http://PestPatrol.com or http://WebRoot.com and run a free scan of your computer. They list any adware/spyware they see, but they do not tell you how to remove it.

The site http://PCPitStop.com, has been very aggressive in taking on adware and spyware. And, although it identifies fewer programs than PestPatrol and WebRoot, it does a much better job of explaining how to clean your computer.

Another way of removing adware is to find its Web site, a plan that can be easy if your home page has been hijacked. Some of those sites offer an "Uninstall" program for their software, though it may be a challenge to find it. Look for an FAQ (frequently asked questions) link.

Unfortunately, such uninstall programs don't always undo all the changes made to your PC. An adware program called i-lookup had a downloadable program to uninstall its software, but the i-lookup-sponsored Web pages listed in the "Favorites" section of Internet Explorer remained. I had to click on "Organize Favorites" and manually delete them.

A better bet for scouring your hard disk clean may be independent programs. The ones I found worked pretty well from all sorts of places (like the Windows registry).

The best bargain was "Ad-aware," popular with many readers, as I learned from the e-mail I got after last week's column.

"Ad-aware 6.0," available to home users for free from http://www.LavaSoftUSA.com, is easy to use. It lets you sort programs and files by type or adware company, so you can see the program it is proposing to delete. It eliminated annoyances such as a toolbar cluttering up Internet Explorer that kept returning even after I told Explorer not to display it.

"Ad-aware" tracked down traces of adware I thought I had removed, and eliminated two viruses that had gotten on the PC because the owner had not kept his virus checker up to date.

However, "Ad-aware" does not automatically watch for adware unless you pay $27 for an upgrade. You must run it regularly and check for updates.

Several readers said they run "Spybot-Search & Destroy," available for free, at http://safer-networking.org.

I have less confidence in "Spy Sweeper" from http://WebRoot.com, which you can try for free or buy for $30. It's easy to use and updates automatically, but offers few details about the adware it finds.

During the cleaning process, "Spy Sweeper" told me I was running other programs I needed to close, but didn't say which ones or how to go about it. It also said I had Internet Explorer running when I didn't (at least as far as I could tell). Such statements don't inspire confidence.

When I asked "Pest Patrol" to clean up a PC whose owner had already manually eliminated or disabled some of the unwanted programs, it found plenty of adware-associated remnants. But it got hung up in the decontamination process. Fortunately, the program displayed the folder that seemed to be causing problems. Because the folder was named Claria, after the adware company, I quit out of "Pest Patrol," opened Windows Explorer, and sent the whole Claria folder to the Recycle Bin.

When I reran "Pest Control," it cleaned everything else out smoothly. You can try "Pest Patrol" for free. The full version, with a year of updates, is $40. The license costs $20 a year.

If you're bothered by adware, but you want to keep using the "free" programs that come with it, "StopZilla," available from StopZilla.com, may be worth a look. It doesn't try to remove the adware and spyware, but claims to suppress it, by eliminating most of the pop-up windows while letting the "free" programs run freely. It costs $20 per year.

Personally, I'd rather just get rid of it all. Then I would use PanicWare.com's free "Pop-Up Stopper" program, or something comparable, to block most pop-up windows.

A final word: Make it a habit to click "No" whenever a Web site tries to get you to download a "free" program.
 

charak1965

New Member
I use Ad-Aware, too. I run it almost every day. The important thing is to also click on the link "Click for updates now" within the Ad-Aware program about once a month. It will very quickly update its database so that you are current.

Without this program, my computer had slowed down almost to a halt because of the huge amount of spyware that I can accumulated. This is worth it!
 

Serena

Administrator
charak1965 said:
I use Ad-Aware, too. I run it almost every day. The important thing is to also click on the link "Click for updates now" within the Ad-Aware program about once a month. It will very quickly update its database so that you are current.

Without this program, my computer had slowed down almost to a halt because of the huge amount of spyware that I can accumulated. This is worth it!

Good point about the frequent updates, Charak! I do that almost every time I run it. The same is true for the PanicWare Pop-Up Stopper. You need to check for updates manually for each of these as they are free services. If you pay for the upgraded service, it will do it automatically, but it only takes a minute to check yourself.
 

Storm

Smile dammit!
Damn,you're clued up Serena! That may explain why this has been running slow. There is allsorts i don't recognise in Windows Explorer,but you fear deleting or uninstalling something you don't know as it may be vital to the working of your pc. Some good info. Thanks.
 

Serena

Administrator
I just finished reading this article and logged back in to post an update. There is apparently a variant of MyDoom, called Doomjuice, that is affecting more than e-mails. It's also scanning net addresses and installing itself on machines.

New 'Doom' Spreads Quietly.
MyDoom variant 'Doomjuice' is sneaking into unsuspecting users' PCs.
By Liam Deely

A new variant of the MyDoom.a virus, dubbed "Doomjuice," targets machines still infected with the original MyDoom worm. Discovered Monday, Doomjuice aims to hit Microsoft.com with a continued DDoS attack.

Microsoft's site appears to be functioning normally, although reports of the company's site being unavailable briefly over the weekend did surface. SCO.com, the target of previous MyDoom worms, is still down.

Antivirus experts fear Doomjuice may spread to the roughly 75,000 machines believed to be infected with the original MyDoom, the majority of which are most likely home machines.

PIGGYBACKING:

Security firms believe the creator of MyDoom.a also wrote Doomjuice. Unlike MyDoom.a, now widely viewed as the fastest-spreading virus ever, the new virus doesn't spread through email, nor does it target SCO.com.

Instead, Doomjuice scans Net addresses in order to install itself through so-called backdoors on machines already infected by previous versions of MyDoom.

COVERING ITS TRACKS:

Once installed, Doomjuice loads a copy of MyDoom.a source code on victims' machines, supposedly in an effort to thwart police investigation.

"The authors know the police are looking for them," says Mikko Hypponen, director of Anti-Virus Research for F-Secure in a statement posted on the security firm's website. And the best evidence against them would be the possession of the original source code of the virus. Before the Doomjuice incident, only the authors of MyDoom.a had the original source code. Now probably tens of thousands of people have it on their hard drives -- without knowing it," continues Hypponen.

Both Microsoft and SCO have offered rewards of $250,000 leading to the capture of the MyDoom culprit.

PERPETRATING THE MADNESS:

While not as severe in terms of machines infected, security firm Sophos suggests that the virus writer may be encouraging others to follow this infection path.

"The other possibility is that MyDoom's author is spreading the code to encourage others to write copy-cat viruses which try and mimic MyDoom's global spread," says Sophos Senior Technology Consultant Graham Cluley in a statement posted on his company's site." "The need for sensible security policies and multi-tier virus protection has never been greater," continues Cluley's statement.

PROTECT YOURSELF:

Doomjuice attempts to connect to TCP port 3127, so blocking that port can thwart possible infection. Visit these sites for details on how to spot the new worm. You'll also find instructions for protecting your machine and getting rid of any infection.
 

tora

Funmaker
And I've just found there's a bunch of crap on my pc spying on me.I need a hammer to handle it.:D
 

Serena

Administrator
tora said:
And I've just found there's a bunch of crap on my pc spying on me.I need a hammer to handle it.:D

Tora--This is the one I use, Ad-Aware. It's free and works great! No need to purchase one. The main difference is on the free version you have to run it manually, but it only takes minutes. I do it every day or every other day. The very first time I used it, it found almost 40 spyware programs. Any problems or questions, just ask! :)

Click on the "Download Now" button for the free version.
http://download.com.com/3000-2094-10045910.html?legacy=cnet
 

Lotussan

I Belong To Steven
Thanks Serena, you are (to quote our man) really, really wonderful...:D
I am installing the adware program now, and popup stopper is next...
Thanks so much! :)
 

Serena

Administrator
Lotussan said:
Thanks Serena, you are (to quote our man) really, really wonderful...:D
I am installing the adware program now, and popup stopper is next...
Thanks so much! :)

You're very welcome, Lotus. -- So are you! :)

Was some man calling me wonderful? Darn--missed out again! That's me for you! :D

val3.jpg
 

Serena

Administrator
tora said:
I've downloaded it.Guess what I've found after scanning my pc?156 spies!

Well done, Tora! Don't forget to run a scan every few days and also to check for updates periodically.

156? Kind of creepy, isn't it?

This one's for you, Tora. :)
valtigger1.gif
HAPPY VALENTINE'S DAY!
 
Top