spyware/adware???

jadzia · 01-29-2005, 08:17 PM

This is a little odd. I was just logged into my cpanel. I noticed something odd when I was looking at the left hand side. The word "documentation" at the very bottom of the list was different than it usually is. It was "Documentation. The area that was underlined is a "sponsored" link to p0rn sites.

I've checked my add remove programs, and there isn't anything odd in there, and I just ran Adaware, X-cleaner and Spybot last night.

Any idea where this came from, or is anyone else having this problem.

I've noticed these sponsored links on other pages, but didn't think much about them until I saw that. They've been happening for a couple days now.

GilGul · 01-29-2005, 09:40 PM

Try to restart the computer in 'Safe Mode' and then run AdAware again. Make sure you have the latest 'SE' version and the latest update offcourse.
(Some of the new SpyWare, when already in the memory, can hide themselves from these programs)

To start is 'Safe Mode' go to Start --> Run --> enter 'MSConfig' and in the program that open up, under the 'Boot' tab select the '/SAFEBOOT' option.

Hope this helps. I hate Spyware...

funguru · 01-29-2005, 11:44 PM

i dont even have the word "documentation" on my cp

imaginemn · 01-30-2005, 12:08 AM

Giant Antispyware is the best antispyware/adware remover. It's now owned by Microsoft. This program has removed spyware and adware programs Spybot and Adaware could not remove.

http://www.giantcompany.com/p_antiSpyware.htm

imaginemn

Atom · 01-30-2005, 12:49 AM

I smell a rat.

**G10** · 01-30-2005, 03:05 AM

I run ad-aware SE plus spybot and use McAfee enterprise edition.

I noticed my system doing some weird things a few days ago and so I ran an online scan from Panda:
http://www.pandasoftware.com/actives..._principal.htm

This baby found infected files and fixed them.

Symantec online scan found them but couldn't fix them. Kind of surprised me that Norton couldn't.

littleFella · 01-30-2005, 04:26 AM

I'm not even sure why we're debating spyware software here. Both her servers run on linux, so none of the recommended antispyware goodies will do any good.

The symptoms appear to have to do with some unpatched vulnerabilities in PHP, or mySQL bot. But then, the mySQL bot attacks only MS Windows systems, while Linux and UNIX are safe.

I think you may want to go through access logs and see what happened and when.

jadzia · 01-30-2005, 08:32 AM

Quote:

Originally Posted by littleFella

I'm not even sure why we're debating spyware software here. Both her servers run on linux, so none of the recommended antispyware goodies will do any good.

The symptoms appear to have to do with some unpatched vulnerabilities in PHP, or mySQL bot. But then, the mySQL bot attacks only MS Windows systems, while Linux and UNIX are safe.

I think you may want to go through access logs and see what happened and when.

Actually, the problem is with my computer and not with the servers or anything like that. I just happened to notice the problem while logged in through cpanel. Sara logged into my cpanel as well to see if the problem happened for her, and it did not.

I've noticed it on other pages (including the first "documentation" I had typed during my first post). I ran Norton AV last night and it found a few adware programs that spybot and adaware hadn't found, and managed to remove most of them.

I think I'll try that panda scan, and maybe that thing from microsoft and if all else fails I'll do the safe mode thing.

Thanks for the suggestions. Spyware/adware irritates me.

samer · 01-30-2005, 10:31 AM

try using Spyware Doctor, and Spy Sweeper. (they find lots of things AdAware and Spybot don't.) - Highly Recommended.

Atom · 01-30-2005, 11:22 AM

Quote:

Originally Posted by jadzia

I think I'll try that panda scan,

I just downloaded and ran it for the heck of it, my PC always seems to be acting funny, it didn't find anything.

Quote:

Originally Posted by jadzia

and maybe that thing from microsoft

That's the rat.

"Validation Recommended

This download is available to customers running genuine Microsoft Windows. Please click Continue to begin Windows validation.

Instructions

This download is available running genuine Microsoft Windows. Click Continue in the Validation Recommended section above to begin the short validation process. Once validated, you will be returned to this page with specific instructions for obtaining the download."

Um, I don't think so.

Spy sweeper found some stuff, I just got that a week or two ago.

**G10** · 01-30-2005, 11:46 AM

What did it find on your system Atom?

I take it that it wasn't a virus but spyware then. If it was a virus and it got past the Panda scan, I will be very suprised.

Atom · 01-30-2005, 11:51 AM

Quote:

Originally Posted by G10

What did it find on your system Atom?

I take it that it wasn't a virus but spyware then. If it was a virus and it got past the Panda scan, I will be very suprised.

Just cookies and spyware ... startnow browser hyjack etc.. no virus.

Honestly, my PC is always acting weird but I don't think it's viruses. I don't know... I'm thinking about taking up knitting.

imaginemn · 01-30-2005, 12:32 PM

Quote:

Originally Posted by Atom

"Validation Recommended

This download is available to customers running genuine Microsoft Windows. Please click Continue to begin Windows validation.

Instructions

This download is available running genuine Microsoft Windows. Click Continue in the Validation Recommended section above to begin the short validation process. Once validated, you will be returned to this page with specific instructions for obtaining the download."

Um, I don't think so.

It just prompts you to enter your WindowsXP key and if it's not a "hacked" serial then it downloads. I've done it on all my systems and there has been no problem. Not much different than authenicating WindowsXP or MS Office.

I recommended this program before MS bought it. The only difference now is that it's free. Before it was around $30 or $40 (can't remember).

imaginemn

Atom · 01-30-2005, 01:09 PM

The way I see it, it just prompts you to buy Windows. This is not a "good" marketing scheme. Effective?, I'm sure it will prove to be. "Good"?, I think not.

Is my use of pirated software "good"? I also think not.

Am I a muppet? I think so.

I've heard good things about Giant and even with M$ owning it now, but I'm just not convinced that it is for our own intrinsic good, now that M$ has it.

jadzia · 02-01-2005, 07:43 AM

After running Adaware, Spybot, Xcleaner, Norton AV, and a Panda scan, and still having the problem, I downloaded Spyware Doctor. It found lots of things, and installed a few of it's own... namely a bunch of naughty shortcuts to my desktop. Also, it would scan, but unless I paid, it wouldn't remove the files. So I went with Spy Sweeper. (those choices were before I read the recommendations here

) Spy Sweeper found 85 items (programs and cookies) and almost 600 traces of programs. It was able to clean out all but one trace item. I now no longer have a problem with hotsearchbar, or any other nasty little program that I can tell. I'm running spy sweeper again, after defragging, running scandisk and rebooting. Just to make sure I have everything gone.

Thanks for all of the suggestions.

Atom · 02-01-2005, 02:24 PM

I've been quite pleased w/Spy Sweeper. I think I've got like 12 days left.

**G10** · 02-01-2005, 02:48 PM

Spy Sweeper removed 600 traces of programs jadzia?

How did it get that cluttered?

What O/S are you running, Windows 3.1?

jadzia · 02-01-2005, 03:44 PM

I run xp. the traces were little here and there files from spyware that was removed by other programs, like spybot and adaware. I think I'll be purchasing spy sweeper before my trial runs out. I like it enough to pay that much for it.

**G10** · 02-01-2005, 04:06 PM

It does seem pretty good, I'll give it that.

I have downloaded it and am currently testing it.

Even though I have Spyware/Adware removers and Antivirus installed, I still run the virus scan from Panda with all options ticked and full system scan about once a week. - (Call me paranoid)

As long as it sorted out your issues though.

oddjob · 03-08-2007, 10:35 AM

Glad to hear everyone seems to be getting their problems fixed. I'd agree that SpySweeper is good.

Since Giant AntiSpyware has been mentioned a couple of times I thought I should clarify that Microsoft stopped releasing spyware definition updates for it in August 2006. Personally, wouldn't recommend it any more as it's well out of touch with current malware.

Windows Defender is built upon a rearchitected version of GIANT AntiSpyware.

OJ