spyware



fireba7
07-10-2005, 02:04 AM
Ok, my computer is really messing up. First I kept getting messages about
low virtual memory, so I changed it to 2x my RAM. Now, I cannot download any
antivirus or antispyware programs. It will let me install it, but not run
it. Not even my Norton software will run. How do I cure this problem??

Rich Barry
07-10-2005, 02:04 AM
How much physical Ram do you have in your System? Do any programs work?
If your Computer is that infiltrated with
Malware you may have to do a Clean Install. BUT you will need a WinXP CD
and if you Upgraded the OS CD you upgraded from. For example Win98, Win2000
etc.
"fireba7" <fireba7@discussions.microsoft.com> wrote in message
news:01500646-637A-42E7-8D36-BB418F9FC485@microsoft.com...
> Ok, my computer is really messing up. First I kept getting messages about
> low virtual memory, so I changed it to 2x my RAM. Now, I cannot download
> any
> antivirus or antispyware programs. It will let me install it, but not run
> it. Not even my Norton software will run. How do I cure this problem??

Mike Hall \(MS-MVP\)
07-10-2005, 02:04 AM
Fire

Re. virtual memory.. let Windows manage it.. if you have less than 512mb
RAM, seriously think about upgrading to that level.. you might get virtual
memory error messages as your hard drive passes 25% free space.. much lower
than that, you will get them regularly.. either free up space or consider a
larger or secondary drive..

Now to the virus problems..

Some programs, like Kazaa for instance, will always give you problems.. even
if you install the so-called spyware free versions, files downloaded from
these services can be devastating.. there are users of these services that
deliberately make infected files available to the unwary.. others just do
not realise that their systems are infecting those of others in a covert
manner..



Please try the processes below.. and do them in order.. none of the
processes are beyond the abilities of a newbie user..



Ensure that you have the Windows XP firewall enabled.. go to your internet
connection properties and enable it NOW..



OK.. start by turning OFF the System Restore function.. click on the Start
button.. right click on 'My Computer', then select Properties.. now select
the 'System Restore' tab..

Check the box "Turn off System Restore" or "Turn off System Restore on all
drives".. now click on 'Apply'.. you will be asked if it is ok to lose all
restore points.. answer YES to this.. now click on 'OK'



Now to the removal process..



The two ant-virus programs listed here will not be affected by the virus..



Run a one shot virus remover.. I have found that McAfee Stinger works for
people.. download and run it..



http://vil.nai.com/vil/stinger/



Another alternative is ..



http://housecall.trendmicro.com/housecall/start_corp.asp



Do nothing until one of these has ceased running..



You will now need to download Spyware removal software.. Spybot and Adaware
are available at these websites.. both are free.. download and run them..
don't forget to check for updates after you have started them..



http://www.safer-networking.org/en/index.html



http://www.lavasoftusa.com/software/adaware/



.... and this link is for the latest Microsoft helping..



http://www.microsoft.com/athome/security/spyware/software/default.mspx



Spybot has the ability to immunize a system, but there is better for this
function, so download and run Spyware Blaster too.. again, check for
updates..



http://www.javacoolsoftware.com/



Time to turn ON System Restore.. this is obviously like turning it OFF, so
just reverse the procedure..



If you have any sense, you will now remove any programs that are known
carriers of all things bad.. some, like Patchou's MessengerPlus can be
installed such that the sponsor software does not get installed with it..
the sponsor software, if left, will re-infect your system immediately it is
run again.. use ADD/REMOVE PROGRAMS to un-install and then re-install,
taking care to check the box that gives you the option of NOT accepting the
sponsor crap.. if a program installation process does not allow you to do
this, forget about it.. leave it well alone..



If you have had your Internet browser hijacked, that is to say, you get
redirected through a search engine NOT of your choosing, you will need
different tools..



HijackThis is a popular and effective tool.. download it from here..



http://www.spychecker.com/download/download_hijackthis.html



CWShredder will eliminate CoolWebSearch and variants.. there is a free
download here..



CWShredder.. http://www.intermute.com/spysubtract/cwshredder_download.html



About:blank.. http://www.securiteam.com/securityreviews/5RP0L0UD5U.html or

http://www.pchell.com/support/aboutblank.shtml



For other tools in the fight against spyware, visit this website and
bookmark it..



http://www.pchell.com



Mark Hasting has put much work into this site.. it is an invaluable site,
both for reference and fix-its..



You must also run a firewall and anti-virus program.. here are some links
for you..



http://www.mcafee.com

http://www.symantec.com

http://www.zonealarm.com

http://www.kerio.com

http://www.sygate.com

http://www.avast.com

http://www.grisoft.com



If you do not run a firewall and anti-virus solution, you are leaving
yourself open to attacks of all kinds.. these two types of program are your
first line of defence..



So by now, your system should be in reasonable shape.. you will have tools
'locked and loaded', ready for weekly use against those who seek to destroy
your pleasure.. incorporate these into a housekeeping policy that includes
running Defragmenter and Disk Cleanup, and you will be able to easily
maintain your system..



Please return to this thread and provide feedback.. it is the only way that
helpers here can determine how effective the advice given has been..



Good luck..


--
Mike Hall
MVP - Windows Shell/User
http://dts-l.org/goodpost.htm





"fireba7" <fireba7@discussions.microsoft.com> wrote in message
news:01500646-637A-42E7-8D36-BB418F9FC485@microsoft.com...
> Ok, my computer is really messing up. First I kept getting messages about
> low virtual memory, so I changed it to 2x my RAM. Now, I cannot download
> any
> antivirus or antispyware programs. It will let me install it, but not run
> it. Not even my Norton software will run. How do I cure this problem??

Maurice N ~ MVP
07-10-2005, 02:04 AM
I'd like to point out that settings for Virtual memory can & are a bit of an art.
See Virtual memory in Windows XP, by Alex Nichol, MS-MVP
http://aumha.org/win5/a/xpvm.htm

I recommend an article at Aumha.org on ways to cleanup parasites.
Follow the quick-fix protocol.
http://aumha.org/a/quickfix.htm

Here are 2 tools from SysInternals that may help you get an insight on what's running.
Autoruns (checks & shows what's set to auto-load at Windows startup)
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml

Process Explorer http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

You likely will have to do cleanups in Safe mode, once you have downloaded current definitions.
You should even use Safe Mode with Networking to do all this work.
Press F8 Function key as the pc is booting up so that you can see bootup choices.
--
Maurice N
MVP Windows - Shell / User

Alex, we miss you greatly !
-----


"fireba7" wrote
> Ok, my computer is really messing up. First I kept getting messages about
> low virtual memory, so I changed it to 2x my RAM. Now, I cannot download any
> antivirus or antispyware programs. It will let me install it, but not run
> it. Not even my Norton software will run. How do I cure this problem??

Maurice N ~ MVP
07-10-2005, 02:04 AM
It is very possible to clean up malware without having to resort to a clean install. Let's not jump to that measure of very, very last resort.
--
Maurice N
MVP Windows - Shell / User
-----

"Rich Barry" wrote
> How much physical Ram do you have in your System? Do any programs work?
> If your Computer is that infiltrated with
> Malware you may have to do a Clean Install. BUT you will need a WinXP CD
> and if you Upgraded the OS CD you upgraded from. For example Win98, Win2000
> etc.


spyware