How to get rid of spyware?

[Grace]

I have picked up a spyware (spycrush) and I thought I had completely removed it yesterday. I even ran Nortons scan again and it didn't find it after reboot. Well low and behold I start the computer this morning and it freakin pops up in my task bar...I can't find it in my computer, documents, network places yada yada... I'm afraid to download any "remove spyware" applications for fear of replacing one with another....any clues? Any trusted removal sites or any instructions you care to give? I have the option of calling a friend later for help, I just thought I'd check with you guys since there are so many IT peeps here :)

Thanks for any help!
Kathy

[::John::]

Spybot (http://www.spybot.info/en/mirrors/index.html) and/or Adaware (http://www.lavasoftusa.com/products/ad_aware_free.php) have been pretty useful for me.

[strmrdr]

spybot search and destroy
http://www.safer-networking.org/

then follow it up by a scan at:
http://housecall.trendmicro.com/

[thomascanty]

Try Ad-Aware (http://www.lavasoftusa.com/) and Spybot Search & Destroy (http://www.safer-networking.org/). Make sure you use both. They often find things the other missed.

[jjackflash]

Another vote here for SPYBOT....

[Grace]

You guys are great~I'm downloading these now. thanks! I'll let ya know :)

[BottomBracket]

Try Ad-Aware (http://www.lavasoftusa.com/) and Spybot Search & Destroy (http://www.safer-networking.org/). Make sure you use both. They often find things the other missed.


I recommend this combo too. Good luck!

[Grace]

so far so good... ad aware didn't find anything, spybot removed 52 infected items... I've restarted and things look ok for now.... Spyware irritates the poo out of me....

Thanks for the help guys!

[kevin_c]

I have used both of these and successfully removed various things from peoples PC's, i also used Micro$oft Windows Defender to remove something these two failed to spot!

Hopefully you've removed the offending 'nasty' though...

[Grace]

Ok- another question...now when I restart a windows installer prompt comes up? along with a photogallery prompt-which won't continue due to missing framework? If I just cancel both of those everything continues fine..but I know thats not the right thing to do. How do I get rid of those prompts?

[condyk]

Windows Defender does a good job and stays updated. Should be on every machine.

[thomascanty]

Ok- another question...now when I restart a windows installer prompt comes up? along with a photogallery prompt-which won't continue due to missing framework?

We have a computer at work that does that, and I've never bothered trying to figure out how to get rid of it. I'll look into that and let you know if I find anything (if nobody else chimes in first).

[Grace]

We have a computer at work that does that, and I've never bothered trying to figure out how to get rid of it. I'll look into that and let you know if I find anything (if nobody else chimes in first).


Awesome! Thanks!

[strmrdr]

Ok- another question...now when I restart a windows installer prompt comes up? along with a photogallery prompt-which won't continue due to missing framework? If I just cancel both of those everything continues fine..but I know thats not the right thing to do. How do I get rid of those prompts?
Its likely the .NET framework.
Some spy-ware has been damaging it to disable windows defender.
Run windows update in the custom mode and select the .net framework from the optional components.

Windows defender is better than nothing but too many spy-ware and viruses have been disabling it lately for me to trust it.

[thomascanty]

I just installed Windows Defender on that computer here at work, scanned the computer, then rebooted. So far I can't make that photo gallery prompt come back. It looks like that may have taken care of the problem, but I'll update the .NET framework also, just to be sure.

[Grace]

Ok, before I throw laptop across the room I'm calling my friend. Spycrush is back. FREAKIN A!!!!!!!!!!!!!!

[thomascanty]

Aww, crud. :(

[HarleyQuinn]

Another vote to try windows defender, it's free and fast. Has ALWAYsS kept my comps good, even with kids on the comp.

[bcdoug]

try this removal method from symantec:

http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-053116-4623-99&tabid=3

[Quad]

Holy crappola cannonites we made it to second page and NOT ONE person has said"get a mac" , you guys are sliping. Get with it or I will confiscate your black turtlenecks!!!!


KP did you try to do a system restore? Try a week or two before you noticed the problem. Or look in the registry. run---regedit look under the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run and see if it is there (not likely but hey you never know when they get a bit careless). You could start in safe mode as well and run spybot from there.

[kevin_c]

Also found this:

http://www.bleepingcomputer.com/forums/topic80749.html

do a google search for 'remove spycrush' and see what come up

[Grace]

try this removal method from symantec:

http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2007-053116-4623-99&tabid=3


Thats the one I'm working on now..

:)

[Grace]

ok...its gone again..but i'm not holding my breath :) thanks for all the responses so far!

[HarleyQuinn]

ok...its gone again..but i'm not holding my breath :) thanks for all the responses so far!
Hope it works chicka.

[cosworth]

Kathy, I'd really like to recommend you uninstall Norton and install Avast!.

Next, understand how you got infected. It wasn't Mac or PC thing, you caused the infection by either being duped or a click in error. Learning how to never get infected is the key. Smart surfing.

It's easy to disguise any program on a Pc or a Mac that says "ckick here and I'll make you happy" and it then performs evil tasks.

[bcdoug]

ok...its gone again..but i'm not holding my breath :) thanks for all the responses so far!

a manual uninstall works far better than an automated tool i've found.

if for some reason it comes back, you may have a layered service provider trojan, which will be harder to deal with, but it can be done.

i will second cosworth's avast! suggestion. smaller footprint, less memory used, and free.

something else to remember, you can't rely on a virus scanner to trap trojans. two totally different things. adaware used to be a top notch program, but it's fallen off compared to others. spybot search and destroy is one of my favourites. windows defender? i see people here supporting it, but i don't trust microsoft as far as i can spit.

to get the best coverage possible, you may need to run more than one spyware scanner each time you suspect spyware.

[cgratti]

if that doesnt work for you grab a program called "hijack this". Then go to www.computing.net, ask for help in the forum there, they will tell you how to run and post the results of the HIJACK THIS LOG, and then they will help you clean your PC out of ny harmful problems. Sounds like a lot but really it isn't and they are pretty good at what they do there. Most times they will direct you to a program to clean out the infected file.

[whereismykit]

the AVG anti-spyware works great.

[queenbee288]

Go here..http://www.techguy.org/

Go to the security section of the forum and do a search for Spycrush. I did and found others with the problem and complete thorough directions for removing it. The people on this forum are great. They helped me get rid of a nasty trojan a few years ago. A member there had to create a program to kill it. They made me very happy because nothing else would get rid of it. Their service is free but they do accept donations.
Good luck!

[Tom W]

Try Ad-Aware (http://www.lavasoftusa.com/) and Spybot Search & Destroy (http://www.safer-networking.org/). Make sure you use both. They often find things the other missed.


I second that notion. Use both, and update both frequently.

I also use Microsoft's Windows Defender, though I'm not certain of it's effectiveness.

[S.Horton]

I think that now is the time to make sure your photos are backed up, and serial numbers for software you've installed are printed and saved, just in case.

[taygull]

Kathy,

As you know I spent 3 days getting my fixed......I had Norton do it via the call in, the tech logged, it took 3 days and only cost me $100.

[cgratti]

I'd never spend $100 for removal of that stuff, I'd reformat first....


Buy a Mac and forget about that kinda stuff...

[bcdoug]

buy a mac is NOT the solution.

smarter use of the computer, watching what you click on, and other things like that will make things more secure.

[In2Photos]

I'd never spend $100 for removal of that stuff, I'd reformat first....


Buy a Mac and forget about that kinda stuff...
Well, it had to happen sooner or later. :rolleyes: