Warning

 

Close

Confirm Action

Are you sure you wish to do this?

Confirm Cancel
Member Login
Site Notices
Posted: 8/22/2004 7:23:33 AM EST
I found this thing called "WebRebates" running on my computer, and I think it's what is causing all my popups. It is also eating a lot of CPU and memory. There is a TXT file that tells how to uninstall it. I followed the instructions, FOUR TIMES, and it always comes back. I uninstalled it, deleted the folder, emptied the bin, and checked back, and the program was gone from the installed program list, running program list, and the folder was gone. WHen I restarted my computer, EVERYTHING WAS BACK!!!

I need some good adware remover software BAD!
Link Posted: 8/22/2004 7:27:27 AM EST
You don't (and shouldn't) have to pay for a program. Get Adaware, Spybot S&D, and Spywareblaster. They're ALL free.

If you just insist upon wanting to buy one, go here, and check the programs out FIRST. Many are in bed with the very spyware/malware companies they claim to remove. Some will even give false positives, so as to get you to buy the product.

www.spywarewarrior.com/rogue_anti-spyware.htm
Link Posted: 8/22/2004 7:28:30 AM EST

Originally Posted By billclo:
You don't (and shouldn't) have to pay for a program. Get Adaware, Spybot S&D, and Spywareblaster. They're ALL free.



Where do I get them then?
Link Posted: 8/22/2004 7:29:00 AM EST

Originally Posted By billclo:
You don't (and shouldn't) have to pay for a program. Get Adaware, Spybot S&D, and Spywareblaster. They're ALL free.

If you just insist upon wanting to buy one, go here, and check the programs out FIRST. Many are in bed with the very spyware/malware companies they claim to remove. Some will even give false positives, so as to get you to buy the product.

www.spywarewarrior.com/rogue_anti-spyware.htm



+1
AdAware- lavasoft.element5.com/software/adaware/
SpyBot-Search and Destroy-- www.download.com/3000-8022-10122137.html
Link Posted: 8/22/2004 7:31:03 AM EST
Spyware Guard
Ad-Aware
Spy-Subtract
Spybot Search & Destroy

Once you have done _all_ of those then you need to get something like Mozilla, an alternative web-browser which does not have the inherent vulnerabilities which IE has. Since I began using Mozilla Firefox I have had 0 popups and no adware/spyware recurrance. Occasionally you will have to go back to IE, since some websites do not display correctly, but as long as you are circumspect you should be able to avoid trouble.


Jame Retief
Link Posted: 8/22/2004 7:34:15 AM EST
Here is my perferred method of cleaning a system that is infected with spyware.
*** Cautionary note.. Don't blame me if you crash your system ***

1) I go through add remove programs and uninstall any programs that do not belong there. ie.. screen saver programs, precision time, date manager, wintools etc.

2) Then I delete all temp internet files, cookies, and plugins.

3) I kill all of the running processes that were initiated by the user. ie started by something other than system.

4) I start adaware program and download the most recent updates. I then kill the explorer.exe process and start the scan.

5) At this point I run hijack this and remove any BHO and anything that does not appear to belong.

*** Dangerous Part ***
6) I browse into the c:\winnt and winnt\system32 folders. I sort the folders by date and delete any executables that are recent and that I do not recognize.

7) I go into documents and settings\user account and delete the temp files in local settings\temp most programs that you use will recreate the temp files when needed.

8) After this I reboot and then run adaware again just as a quick check behind.
Link Posted: 8/22/2004 7:55:23 AM EST
Can I trust that all the files it finds are adware and stuff, or might it find a file that is actually good?
Link Posted: 8/22/2004 7:58:39 AM EST
I have never crashed a computer by running adaware. And the applications that I support work afterwards. If you run a program that is ad supported then it might not work after running adaware.
Link Posted: 8/22/2004 8:07:13 AM EST
I ran both Spybot and Ad-aware, and while they both got rid of hundreds of files, that damn WebRebates thing is still there!
Link Posted: 8/22/2004 11:29:10 AM EST
[Last Edit: 8/22/2004 11:42:45 AM EST by billclo]
I did a bit of rummaging for you, and found this: I accept no responsibility if you mess it up. :)

www.pestpatrol.com/PestInfo/e/ebates_moneymaker.asp

You also need to reboot your system in Safemode, and if you are using Win XP, disable system restore. To restart in safe mode, restart system, and hold down the Control key, or F5 should do it. You might have to do it a couple times. When the system starts in safe mode, turn off system restore, and then rerun your Adaware and SPybot S&D scans... if you're using XP, go to start/control panel/system/system restore/ and turn it off. Viruses and other nasties can be restored if you use the system restore, or they can "hide" there and come back later.

You can also use a program called "Hijack this", available here:

www.net-integration.net/tools/hijackthis.html

Make SURE you read the tutorial first, as you can really hose your system if you delete the wrong things.

Also, to scan for trojans, etc, get this program. It's an 30-day trial, but it does wonders in finding and killing trojans, etc.

www.misec.net/

Also, when you use Adaware, you need to enable certain options that aren't default. Hit start to start a scan, and when the next screen comes up, click on custom scan. Click on customize, and enable scan within archives, and every option under the scanning options tab. This will bring up additional files to be scanned, and will lengthen the scan time, but is more thorough.

Also, make sure you go into your IE browser, tools, internet options, and clear out temporary files (and offline files too). Sometimes crap can lurk in there if you don't. Make sure you empty out your recycle bin too.

After all that, use the Immunize function in Spybot S&D, and get the Spywareblaster program available here:

www.javacoolsoftware.com/spywareblaster.html

These two will help keep stuff from invading your system in the first place.
Link Posted: 8/22/2004 11:37:42 AM EST

Originally Posted By inzane123:
Here is my perferred method of cleaning a system that is infected with spyware.
*** Cautionary note.. Don't blame me if you crash your system ***

1) I go through add remove programs and uninstall any programs that do not belong there. ie.. screen saver programs, precision time, date manager, wintools etc.

2) Then I delete all temp internet files, cookies, and plugins.

3) I kill all of the running processes that were initiated by the user. ie started by something other than system.

4) I start adaware program and download the most recent updates. I then kill the explorer.exe process and start the scan.

5) At this point I run hijack this and remove any BHO and anything that does not appear to belong.

*** Dangerous Part ***
6) I browse into the c:\winnt and winnt\system32 folders. I sort the folders by date and delete any executables that are recent and that I do not recognize.

7) I go into documents and settings\user account and delete the temp files in local settings\temp most programs that you use will recreate the temp files when needed.

8) After this I reboot and then run adaware again just as a quick check behind.



WTH

your are inzane
Link Posted: 8/22/2004 11:42:03 AM EST

Originally Posted By cyanide:

Originally Posted By inzane123:
Here is my perferred method of cleaning a system that is infected with spyware.
*** Cautionary note.. Don't blame me if you crash your system ***

1) I go through add remove programs and uninstall any programs that do not belong there. ie.. screen saver programs, precision time, date manager, wintools etc.

2) Then I delete all temp internet files, cookies, and plugins.

3) I kill all of the running processes that were initiated by the user. ie started by something other than system.

4) I start adaware program and download the most recent updates. I then kill the explorer.exe process and start the scan.

5) At this point I run hijack this and remove any BHO and anything that does not appear to belong.

*** Dangerous Part ***
6) I browse into the c:\winnt and winnt\system32 folders. I sort the folders by date and delete any executables that are recent and that I do not recognize.

7) I go into documents and settings\user account and delete the temp files in local settings\temp most programs that you use will recreate the temp files when needed.

8) After this I reboot and then run adaware again just as a quick check behind.



WTH

your are inzane



Dude, I normally have to do this 3x per day on average. It takes about 30 minutes to do and when I am done the system is clean. The only problem is that the friggen users come along the night after and put the shit back on. I hate it when the overnight staff comes along and tries to surf porn.
Link Posted: 8/22/2004 11:45:18 AM EST

Originally Posted By inzane123:

Originally Posted By cyanide:

Originally Posted By inzane123:
Here is my perferred method of cleaning a system that is infected with spyware.
*** Cautionary note.. Don't blame me if you crash your system ***

1) I go through add remove programs and uninstall any programs that do not belong there. ie.. screen saver programs, precision time, date manager, wintools etc.

2) Then I delete all temp internet files, cookies, and plugins.

3) I kill all of the running processes that were initiated by the user. ie started by something other than system.

4) I start adaware program and download the most recent updates. I then kill the explorer.exe process and start the scan.

5) At this point I run hijack this and remove any BHO and anything that does not appear to belong.

*** Dangerous Part ***
6) I browse into the c:\winnt and winnt\system32 folders. I sort the folders by date and delete any executables that are recent and that I do not recognize.

7) I go into documents and settings\user account and delete the temp files in local settings\temp most programs that you use will recreate the temp files when needed.

8) After this I reboot and then run adaware again just as a quick check behind.



WTH

your are inzane



Dude, I normally have to do this 3x per day on average. It takes about 30 minutes to do and when I am done the system is clean. The only problem is that the friggen users come along the night after and put the shit back on. I hate it when the overnight staff comes along and tries to surf porn.



I would have to say it is surgical room clean for sure.
Link Posted: 8/22/2004 11:56:06 AM EST
Yeah, but it is the only way. Since these programs leave pieces of themselves behind so that they can self reinstall. If you look in your temp folders you will see the executables for these programs. Just waiting on something to trip it. The same is true for the system 32 folder.
Link Posted: 8/22/2004 11:58:28 AM EST
Start using Mozilla and get a router/firewall. Mozilla is free and a cable/DSL router-firewall combo is only about $40.
Link Posted: 8/22/2004 12:13:16 PM EST
[Last Edit: 8/22/2004 12:14:15 PM EST by yugosksfan]

Originally Posted By TacticalMan:
Start using Mozilla and get a router/firewall. Mozilla is free and a cable/DSL router-firewall combo is only about $40.


That won't stop dumbasses from clicking 'OK' on an install pop-up they don't recognize.
It's sure a start though.
Link Posted: 8/22/2004 12:14:27 PM EST
Top Top