Domain: tomcoyote.org
Stories and comments across the archive that link to tomcoyote.org.
Comments · 9
-
check facts first
http://forums.tomcoyote.org/index.php?showtopic=7
4 921&view=findpost&p=346242
it looks like /. is ultimate FUD nest -
Re:I second that
For profesional use nothing beats HiJackThis. It requires skill and/or google to use though.
Just in case you run into something like this again -
Other anti-spyware stuff
I've seen a lot of people mention AdAware and Spybot, but I figured I'd throw a couple other recommendations in. For the computers we get in at work, we use a combination of
Autoruns (Kind of like MSConfig on crack)
HiJack This
and some other scanner, usually Ad-Aware or SpySweeper.
SpySweeper makes for some impressive numbers, but it's unclear to me why these numbers are any higher than what other software detects. Maybe it counts too many cookies. -
Re:your mission, should you choose to accept it ..Ad-Aware doesn't cut it. Spybot Search & Destroy finds things that Ad-Aware doesn't. For systems that are seriously 0wn3d, you need Spybot. Also, HijackThis, which runs in seconds, is great for getting rid of insidious components that software sneaks on your computer.
I use all three of these programs. No one program finds everything. Oh, and also use a virus scanner, of course.
-
Please learn how to make links.Please learn how to make links.
<a href="http://www.spywareinfo.com/~merijn/">Merjin
(without the "; " or any spaces put there by Slashdot) yields:< /a>
<a href="http://www.tomcoyote.org/hjt/">HijackThis</a >
<a href="http://www.sysinternals.com/ntw2k/freeware/p rocexp.shtml">Process Explorer</a>Merjin
If that's too much typing for you,
HijackThis
Process Explorer<URL:http://www.spywareinfo.com/~merijn/>
(without any spaces put there by Slashdot) yields:
<URL:ht tp://www.tomcoyote.org/hjt/>
<URL:http://www.sysi nternals.com/ntw2k/freeware/procexp.shtml>http://www.spywareinfo.com/~merijn/
Also:
http://www.tomcoyote.org/hjt/
http://www.sysinternals.com/ntw2k/freeware/procexp .shtml
Don't try and terminate the spyware's running processes.
"Don't try to terminate". -
Please learn how to make links.Please learn how to make links.
<a href="http://www.spywareinfo.com/~merijn/">Merjin
(without the "; " or any spaces put there by Slashdot) yields:< /a>
<a href="http://www.tomcoyote.org/hjt/">HijackThis</a >
<a href="http://www.sysinternals.com/ntw2k/freeware/p rocexp.shtml">Process Explorer</a>Merjin
If that's too much typing for you,
HijackThis
Process Explorer<URL:http://www.spywareinfo.com/~merijn/>
(without any spaces put there by Slashdot) yields:
<URL:ht tp://www.tomcoyote.org/hjt/>
<URL:http://www.sysi nternals.com/ntw2k/freeware/procexp.shtml>http://www.spywareinfo.com/~merijn/
Also:
http://www.tomcoyote.org/hjt/
http://www.sysinternals.com/ntw2k/freeware/procexp .shtml
Don't try and terminate the spyware's running processes.
"Don't try to terminate". -
More fake programsI found a comment from this page very informative:
Rogue Anti-spyware Programs Part 3
Looks like this program isn't the only one.I mentioned some of these before, but this is a more inclusive list.
Spy Wiper
AdWare Remover Gold
BPS Spyware Remover
Online PC-Fix SpyFerret
SpyBan
SpyBlast
SpyGone
SpyHunter
SpyKiller
SpyKiller Pro
SpywareNuker
TZ Spyware-Adware Remover
xp-AntiSpy
SpyAssault
InternetAntiSpy
Virtual Bouncer
AdProtector
SpyFerret
SpyGone
SpyAssaultSources: Doxdesk.com: parasite, Tom Coyote Forums, Spywareinfo.com forums, safernetworking.org, home of Spybot Search & Destroy
-
New.NetI do tech support, and one of the worst things I've seen is a piece of software called New.Net. While not technically spyware (though that's arguable), it actually overwrites parts of the user's TCP/IP stack so that any time they access the internet (not just their browser), it gets pushed through the (usually fairly buggy) New.Net DLLs.
And the fun part is, if you (or the user) uncheck the New.Net software in MSCONFIG, it doesn't just stop New.Net from working... They simply stop being able to use the internet. At all. So then we have to pray that their version of New.Net has a working uninstaller, or we have to go through a huge manual uninstall that involves removing multiple registry keys. BTW, if anyone here gets this or other spyware that is difficult to remove, try using a program called HijackThis and "Fix" anything that looks out of the ordinary (use common sense... don't delete everything).
-
Use Hijackthis
Try Hijackthis. It allows much more control and can be run from a CD. We use it for tech support. Much better, faster, and doesn't cause any issues.