Spyware? Help

[liquidforce519]

I have the Spybot Search and destroy thing the on my computer? I was searching my computer for spyware and it says I have DSO EXPLOIT and possible hijacker. Then I click on fix selected problems and it says problem fixed then I do the search again and the same problems come up. Does anyone have the Spybot thing and what do I do? What would this do to my computer. thanks.

[garveyj]

I use spybot - there are some things that will continue to come back because they are that bad of spyware items. Best thing I can suggest is to run spybot, then go to add/remove programs, and get rid of anything in there that you do not recognize, then run spy bot again...This will usually get rid of most of it.

[Brandon Lee]

adAware works pretty good too

[liquidforce519]

ok where is add/remove programs? its not like in file or anything?

[liquidforce519]

ok where is add/remove programs? its not like in file or anything?

[DC]

Search on http://forums.thatcomputerguy.us/index.php?showforum=21 for "DSO EXPLOIT"

Consider installing the following SpyWare and AdWare Programs:
AdWare: http://www.lavasoft.de/
SpyBot: http://www.majorgeeks.com/download2471.html

And then.. Running these free virus scans
MicorTrend House Call: http://housecall.trendmicro.com/housecall/start_corp.asp
Symantec Virus Scan: http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=23&pkj=GKPFBXUQIZQVMUYTACD
Macafee Virus scan: http://us.mcafee.com/root/mfs/default.asp?cid=9435

[liquidforce519]

Ok thanks alot guys

[Jim M]

You have to clean spyware in Safe Mode. Doing it while logged into Windows is not very effective. Most of the files and exe's are locked, being used or hidden. In safe mode, everything is exposed.

Update Spybot and AdAware
Reboot into Safe Mode
Run AdAware, then Spybot.
Clear the contents of EVERY temp folder:

c:\windows\sysem32\temp
c:\docs and settings\yourname\local settings\temp
c:\docs and settings\yourname\local settings\temp\temporary internet files

Go into your Registry (start>run> type 'cmd', then type 'regedit')

HKLM= HKey Local Machine
HKCU= HKey Current User

HKLM> Software > (find and delete any spyware folders like AWS, MySearch, BonziBuddy, CoolWebSearch, etc...)

Then go to HKLM>Software>Microsoft>Windows>Current Version>Run
This is stuff that fires off when you log in. Look for any suspicious exe's that you do not want to fire up on startup. The only thing I leave in the Run field is my AntiVirus, NOTHING else, and I have about 50 programs installed.

Then do the same thing to HKey Current User

HKCU> Software > (find and delete any spyware folders like AWS, MySearch, BonziBuddy, CoolWebSearch, etc...)

HKCU>Software>Microsoft>Windows>Current Version>Run
Delete anything suspicious that you dont want running on startup.

[Jim M]

ps- if you read that you owe me $120 for billable time.

[RUSSIAN]

how do you go into safe mode.
the check is in the mail

[PimpinD]

here is Microsoft's spyware pretty good and free....
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en

[ballywho]

Get it early or else it will spread, it happened to me and we had to get a new hard drive.
_________________
life during the great depression

[Jim M]

RUSSIAN, On most computers, tap F8 as the computer boots up- between the bios screen and the Windows flash screen.