spyware in my laptop

[tarunk]

HI All,

My taskbar has a flashing message saying i have spyware of great threat. I have AVG antivirus software(free edition) but no anti-spyware. I installed the free edition of AVG anti-spyware, and while it scans for any spyware, my system switches off. I can't make it bring to my desktop, unless i try after 15 minutes.
I have important files which i want to back up but worried about getting the infected object inthose files.
Has anyone gone through this before? what is the best way to back up my files or is it too late. I am planning to buy a new hardisk anyway, ihave some problem with it aswell.

any suggestion? thanks

[PeejAvery]

That message itself is spyware. If you have Windows XP, you have a better chance of removing it.

Good News
We (my co-worker) and I have battled that piece of software many times.

Bad News
We have only cleaned it off a machine successfully once without having to format and reinstall everything. This piece of spyware integrates itself so well, that it almost never can be removed.

Steps to Take
1. Download and install the following

Spyware Terminator (http://www.spywareterminator.com/)
Spybot - Seach & Destroy (http://www.safer-networking.org/en/download/index.html)
LavaSoft Ad-aware (http://www.lavasoftusa.com/download_and_buy/product_comparison_chart.php)


2. Fully update each of those softwares with the latest updates.

3. Immunize Spybot. Note: you must click the immunize button on the left, then the button in the immunize section.

4. Reboot into safe mode. You can do this by pressing F8 (sometimes repeatedly) right before the "Loading Windows" boot screen comes up. Then select safe mode.

5. Run full scans with all three of those softwares.

6. I would also suggest using CodeStuff Starter (http://www.snapfiles.com/get/starter.html) to disable unnecessary programs loading at startup.

[tarunk]

thanks for that. I'll try all the things you have mentioned.

[PeejAvery]

You're welcome. Post back with the results.

[tarunk]

HI Again,

I installed the 1st and 3rd link you recommended and scanned my system. Adware found out that i have trojan horses and when i clicked on 'Remove all', message came back saying it will have to be deleted in my next reboot.
I did but deletion failed. I scanned with AVG again and it shut down the system when itwas scanning system32 folder. Looks like there is a dll called something like xno.....dll and that's what causing the problem.

I beleive this means i need to reformat everything. Can i click on system tool and reformat ? Would this surely get rid of the trojan horse.

I am planning to put in a new hard disk anyway, as i have been getting messages in my eventviewer about a part of hardisk is corrupted. I don't have the windows xp homeedition cd which came with my laptop. Can i somehow get hold of my current registrationkey so that i can use that when i reinstall xp in my new hardisk? Also, can anyone tell me how would i install my network adapter and other softwares like that. Because i have been changing home recently, i seemed to misplaced all the cd. It's a toshiba laptop.
thanks

P.S i couldn't install the 2nd link because i ran out of time y'day to download it.

[PeejAvery]

Well, first off, formatting and reinstalling everything will get rid of any virus because it erases the whole hard drive first.

BUT did you do these things in safe mode? ALSO I said to download all three, not some. Each one of those softwares can find different parts and pieces of malware.

[tarunk]

Hi, in thesecond link, which one should i download? there are so many options .
BN FileForum
Freeware-Archiv
Planet Mirror
Download from our server1
download from our server 2
etc...

thanks

[PeejAvery]

They all link to the same program. They are just different mirrors.

[tarunk]

I will scan the system withall the three in safe mode and will post back the result.
thanks.

[dglienna]

If your computer has a sticker with the license key on it for the current version of XP that you want to install, then you can use ANY disk (that is correct) to reinstall. Keep in mind that if you format first, it won't reinstall system drivers, but you could get them in advance from the mfg. Have someone do it for you, so it's their problem.

[PeejAvery]

If your computer has a sticker with the license key on it for the current version of XP that you want to install, then you can use ANY disk (that is correct) to reinstall.
Unfortunately, this is not completely true. You will need to match up Home vs. Professional. Also, you will not be able to use OEM versions of Windows.

[tarunk]

HI! I was without internet for a week so couldn't reply. My laptop wouldn't stay on safe mode. With great difficult i try to start it up but it shuts down itself. I believe this means i need to reformat it anyway.
Bythe way, I managed to get hold of a program which will detects my licencekey for xp and office. So ihave noted that down.
THanks everyone.

[dglienna]

Well, if you have a sticker, you can call ms with just about any disk.

(except MSDN :) )

[RaleTheBlade]

Just install Mac OSX Tiger and enjoy :P

Seriously though, I had the same problem you did awhile back and I rolled back my system to a prior date and everything was fine.

[PeejAvery]

Just install Mac OSX Tiger and enjoy :P
I would agree because I am a Mac user, but buying a Mac is expensive. Oh, and I do love the lack of spyware!

[tarunk]

Hi again,
I managed to reinstall everything on my new harddisk. What a difference now. But i can't connect to the internet through wireless connection. In my previous harddisk, all i had to do was to buy a wireless router(netgear) ,install the software and it went online straight away. Now when i go to network connection in my controlpanel, there is no wireless list. I can go online using ethernet, no problem with that. So that means the software which i had to connect using wireless is not there in my new harddisk. How do i findout what wireless hardware i have or how to find out which software to install. Any idea anyone?

thanks

[dglienna]

You probably need system drivers for the hardware. Best place to look is the mfg's website. Punch in the model # and it will give you a list of devices. Look in Device Manager for the Yellow Exclamation points, and look for those devices.

[PeejAvery]

If you still have the original install disks that came with the hardware...use that. If not, you will have to go and download them as dglienna mentioned.

Note: mfg's website = manufacturer's website.

[dglienna]

not always the case if the installed OS is different. SP2 in particular

[tarunk]

Thanks everyone for the reply.
In Device Manager , should i look in a particular subdirectory for the hardware i am looking for? I tried network adapter, everything is upto date there.
Iam not in front of my laptop now, so i'll what you have suggested.

Thanks

[PeejAvery]

If the wireless adapter is under network adapters and there are no errors, then it should be functioning fine. Check the Network Connections in Control Panel and see if all is correct there. Also, if the wireless is operating fine, you can check the system tray for the wireless icon. Double-click it and it should open all wireless networks in your area. Then you have to select one and click connect.

[tarunk]

Infact i tried all the things you said y'day. There is nothing to do with wireless in my network connection in the control panel and also in my taskbar. So obviously i have lost the wireless connection software. I didn't get around to write down my previous wireless connection device, so i am not sure what i had before.

[dglienna]

Start -> My Network Places -> View Network Connections

You should see up to 3 devices. LAN, WIFI, and 1394 (Digital) under LAN and High-Speed Internet. You might have a Broadband (dsl) or any Dial-Up connections listed.

If it isn't there, then the driver is definately wrong, or not present.

[tarunk]

HI again,
I managed to find out the driver recovery cd and found out that i had aethors wireless connection before and installed it. Not sure why it didn't appear in my network adapters or other devices list. Now i can see atheros wireless connection in my taskbar and network connection list. But i am workign my way through to connecting to the internet through wireless as my netgear and my laptop don't talk to each other. Netgear tech support suggested i upgrade my firmware.
When i try to connect using wireless with my netgear i get 'out of reach' or otherfunny error messages while my netgear is sitting so close to my laptop.

Will try today and see if upgrading the firmware helps.

[PeejAvery]

Sometimes the Device Manager does not recognize hardware if it is too strange. You can check under the Other category. If Windows can't recognize hardware, it will be there.

[tarunk]

Great news. Back to my wireless connection. Netgear tech support is great. They always do a great job. I had to delete my wireless connection in my network connection properties and started all over again. It is working perfect. Thanks everyone for yourhelp.
I have installed avg anti-spyware and anti-virus and i have got netgear adsl router. Do you think this will be more than enough to safe me from the net. I usually don't download anything from the net.

Thanks again.

[dglienna]

pay $49 for AdAware. Kills spyware, and a licence will keep you up to date with the bad guys

[PeejAvery]

Forget paying money. You can get freeware just as good (on a personal, not commercial level) as any other "security" software.

AVG Antivirus is free, but if you bought the antispyware as well (formerly Ewido), you are in good shape. I would actually recommend not installing Ad-Aware if you already have AVG Antispyware (Ewido).

If you don't, get Spyware Terminator (http://www.spywareterminator.com). It can do just what AVG/Ad-Aware does, and it's free.

To read more on my take with best computer security/performance software that is free, see this (http://www.codeguru.com/forum/showpost.php?p=1558350&postcount=2).