PC Pals Forum

Technical Help & Discussion => Broadband, Networking, PC Security, Internet & ISPs => Topic started by: ben21 on March 15, 2006, 09:19

Title: spy ware
Post by: ben21 on March 15, 2006, 09:19
help am having a spy ware which is taking a lot of memory allocation,thus its known as  webrebates,every time i stop its process it restarts again immedeatly,thus as irun my  NO Adware spy ware remover "or is it not a spy ware remover"the webrebates is found in the registry,removed and then it starts again well how can i get  read of it......

then is the No Adware that am using meant to stop spyware or  advertisements
Title: spy ware
Post by: Simon on March 15, 2006, 10:00
Hi Ben, first you need to download Ad Aware and Spybot, which are the two spyware scanners we usually recommend (links below).  Update them and run them, and see if they cure the problem.  If they don't, boot into safe mode (keep tapping F8 during the start of the boot sequence), and run the two programs again.  Boot back into normal Windows, and the problem should be fixed.  Come back to us if not.  I would also recommend Spyware Blaster, which prevents most spyware from infecting your PC in the first place, providing it's kept updated regularly.

Ad Aware (http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1)
Spybot (http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10401314.html?tag=lst-0-1)
Spyware Blaster (http://www.download.com/SpywareBlaster/3000-8022_4-10486084.html?tag=lst-0-1)
Title: spy ware
Post by: Sandra on March 15, 2006, 12:10
Try this method Ben :

Manual removal
Please follow the instructions below if you would like to remove WebRebates manually. Please notice that you must follow the instructions very carefully and delete everything that is mentioned. In most cases the removal will fail if one single item is not deleted. If WebRebates remains on your system after stepping through the removal instructions, please double-check by stepping through them again.
Start the registry editor. This is done by clicking Start then Run. (The Run dialog will appear.) Type regedit and click OK. (The registry editor will open.)
Browse to the key:
'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run'
In the right pane, delete the values called 'WebRebates0' and 'WebRebates', if they exists.
Exit the registry editor.
Restart your computer.
Start Windows Explorer and delete:
%ProgramsDir%\Web_Rebates\
%ProgramsDir%\WebRebates
Note: %ProgramsDir% is a variable (?). By default, this is C:\Program Files.

Sorry if this is the method that you have already tried but maybe you have missed a step ?

This has a lot more information about which folders it creates and more things to delete in the registry :

http://securityresponse.symantec.com/avcenter/venc/data/adware.webrebates.html
Title: spy ware
Post by: davy51 on March 15, 2006, 13:09
this may be the type of spyware that installs itself in restore

might have to turn off restore while running spy removers to get rid of it
Title: spy ware
Post by: gmax on May 10, 2006, 15:16
dont waste your time with "Ad Aware and Spybot" they miss too much
spyware, try "counterspy" it's a lot better, link below.
 :)
  http://www.sunbeltsoftware.com/CounterSpy.cfm
Title: spy ware
Post by: Simon on May 10, 2006, 15:56
The attraction with Ad Aware and Spybot is that they are free.  CounterSpy, as far as I am aware, isn't.  I have just been having a discussion with Clive about all these various spyware removers, and scepticism is growing between us as to whether any of them are actually genuinely any good.  Why do they all detect and miss different things?  Surely a trojan is a trojan, and spyware is spyware.  What one finds, so should all the others, shouldn't they?  

:?

Oh, and :welcome: gmax.  :)
Title: spy ware
Post by: chorleydave on May 10, 2006, 16:08
I agree.  Although I still have AdAware and Spybot S&D, plus Xoftspy, I find myself rarely bothering to run them these days, prefering to do an Alt>Ctrl>Delete to bring up task manager and have a look to see what is running.

It's the same with anti-virus.  A friend of mine was running AVG and was sure he had a virus, so I uninstalled it and replaced it with Avast.  The first run of Avast found two items and removed them!   :o
Title: spy ware
Post by: gmax on May 11, 2006, 01:29
I  used to use both Ad Aware and Spybot ,but they just don't detect enough
spyware! so i downloaded counterspy, problem solved it's vastly superior to Ad Aware and Spybot ,it's easy to check for yourself ,download the free
15 day trial of counterspy, then run Ad Aware and Spybot then run counterspy and you will see what Ad Aware and Spybot missed.
 there's plenty of reviews on counterspy like the one below :)

Code: [Select]
CounterSpy
A Software Review
by Herb Goldstein
Member of the Sarasota Personal Computer Users Group, Inc.

You are completely unaware that it's surreptitiously in your computer. You will never know where you got it, but you can bet your bottom buck it's there, and more than likely in plentiful quantity. It's spyware, the scourge of today's computer users. It used to be that viruses were mostly what was on everybody's malware mind. They still are, but some excellent antivirus software like PC-Cillin has delivered us from that phobia being foremost in our mind. Instead, we have a worthy worrisome replacement, spyware (including adware) that runs amok like viruses did years ago.

Spyware and adware are items you pick up unbeknown to you while surfing the net. They can lie invisible among your files, in the registry, in memory, reporting back to their origin without your knowledge or permission every move you make, every place you visit while you surf, and every keystroke coming from your keyboard. It is an outrageous invasion of privacy that steals your peace of mind, productivity, resources and slows your Internet connection, results in sluggish PC performance, increased pop-up ads, unexplained homepage change, and mysterious search results. What's worse, it is most often impossible to either find or remove. The odds are that right at this moment there is a significant amount of it residing in your computer even though you may have taken steps to find and remove it.

It may not be that you are unaware of the problem as much as the inability of most anti-spyware/adware software to deal with it. The two most widely used free apps to now have been AD-Aware and Spybot Search & Destroy. Used jointly, they have proved to have a maximum effectiveness of perhaps 50 % (if you are lucky). Additionally, a plethora of other anti-spyware utilities exist, none being more, and most less effective. Of these, Webroot's Spy Sweeper has proven best up to now, but some intensive research and testing by PC World and other publications has produced a new contender that leaves everything else in the dust. The name of the new champ is COUNTERSPY, out of Sunbelt Software, right here in Clearwater, Florida. It is easily the most effective app in finding and destroying spyware/adware. The icing on the cake is that it is also among the least expensive ($20) outside of outright free.

When it comes to utilities in particular, I'm from Missouri. As a software reviewer from way back, I have experienced a long line of clunkers. So it was with considerable skepticism that I downloaded a free 2-week trial version of CounterSpy. The results were simply astounding. After using a number of anti-spyware apps most recently, I was sure that little if any malware existed on my computer. I was wrong! CounterSpy found numerous offenders, some serious, that all the others had missed. The PC World report was right on the money! Aside from being considerably the most effective of the anti-spyware software out there, here are some of the other things I like about CounterSpy:

* It has an exemplary interface and is extremely easy and intuitive to use. Click the "Scan" button and it does the job without further ado. Scan inclusion settings are fully adjustable.

* It can automatically or manually update to include current spyware definitions.

* You can elect to scan or do a complete PC checkup to find other malware problems. It will update your computer to recommended security levels and suggest and perform changes with your permission. You can choose to either quarantine or delete spyware. CounterSpy will explain the origin and nature of any malware it finds.

* The program includes a history cleaner that will eliminate any record of where you have been and been doing on your computer.

* You can permanently erase beyond any recovery any sensitive files you select.

* "Active Protection" can be selected to keep CounterSpy running silently in the background to intercept spyware.

* It is very reasonably priced. A fully functional 2-week free trial period can be downloaded from www.sunbeltsoftware.com. Registration is $20 and includes a full year of updates. Thereafter updates are only $10 a year.

You can find a complete rundown on spyware and CounterSpy in the April issue of PC World. CounterSpy is also recommended by and available from Dell. It has our highest recommendation and we consider it not only the best, but a must-have for all computer users who value their privacy! :
Title: spy ware
Post by: Simon on May 11, 2006, 09:56
Whenever you download a new spyware detector / remover, it always seems to find stuff that your other applications missed.  This is where some scepticism comes in.  Could it be that programs 'plant' spyware on your PC, to make themselves look good by subsequently detecting it?  Particularly the ones which only detect the spyware in the trial versions, then you have to purchase the full versions for the removal facilities.  It would be interesting to run just one application, such as CounterSpy for a period of, say, 12 weeks, then download another new one, and see what it detects that CounterSpy 'missed'.
Title: spy ware
Post by: Rodders on May 11, 2006, 11:14
In addition to the usual panoply of security apps, I also employ WinPatrol (http://www.winpatrol.com/) and was so impressed with it that I even parted with small amount of dosh for the Pro version.

Give it a whirl.  You can choose between using it for FREE, or paying for it - thus unlocking lots of useful bells and whistles.


  
Title: spy ware
Post by: mistybear on May 11, 2006, 13:28
I've downloaded and installed it.
Thought I'd give it a run on the P.B. while the Medion is being fixed.
Title: spy ware
Post by: Rodders on May 12, 2006, 09:52
Well?  (https://www.pc-pals.com/smf/proxy.php?request=http%3A%2F%2Fimg.photobucket.com%2Falbums%2Fv300%2FMothballs%2FSmileys%2Fbored.gif&hash=9197a4a479e1a611bb1b55edacff733dbd727e6a)


  
Title: spy ware
Post by: sam on May 12, 2006, 10:09
i also downloaded it and it seems to do very much what spybot does but it doesn't kill the system resources either so I have decided to have both running, can't hurt!
Title: spy ware
Post by: Rodders on May 12, 2006, 11:17
Sure.  A belt-and-braces approach is always better than being caught with your pants down.  I've recently uninstalled Spybot though, after the front end started displaying some odd behaviour.  Until that's been fixed in a new release, I'll just have to make do with: AVG Pro; Mailwasher Pro; Blue Frog; Firetrust Benign; SpywareBlaster; WinPatrol Plus; HiJackThis; and a highly-customised Hosts file.


  
Title: spy ware
Post by: sam on May 12, 2006, 11:36
paranoid at all ??  :laugh:  :laugh:  well at least you will be nice a protected!
Title: spy ware
Post by: mistybear on May 12, 2006, 12:11
Quote from: "Rodders"
Well?  (https://www.pc-pals.com/smf/proxy.php?request=http%3A%2F%2Fimg.photobucket.com%2Falbums%2Fv300%2FMothballs%2FSmileys%2Fbored.gif&hash=9197a4a479e1a611bb1b55edacff733dbd727e6a)


  


Sorry am I keeping you up.

You did say give it a whirl, so I am.
 
I have no idea what it's suppose to do, thought I'd find out.
It did let me know that after using CCleaner, when I restart my computer I will lose a couple of files.
Title: spy ware
Post by: Rodders on May 12, 2006, 13:02
Gosh!  I'm not used to ladies apologising for keeping me up.

I don't suppose Scotty happened to mention which particular files would be lost?  However, I would imagine they will be the usual bits of clutter and orpahaned links that CCleaner is designed to zap.

As regards finding out exactly what WinPatrol does, this article (http://www.pcworld.com/howto/article/0,aid,124577,00.asp) may help.
 

  
Title: spy ware
Post by: sam on May 12, 2006, 13:12
the link on the page to the most cluttered tray is not that impressive, I bet clive has that many icons for spyware programs alone in his tray!
Title: spy ware
Post by: mistybear on May 12, 2006, 13:52
Gosh!  I'm not used to ladies apologising for keeping me up.

Why's that, because it rarely happens. :wink:

Thanks for the link, I think it will be good for Michael's computer as his takes forever to boot up fully. As in turn it on and go and have breakfast, and it should be ready when you're finished.

The files to be deleted are temporary/content.IE5/indx.dat    and
                                                     /cookies/index.dat
That doesn't appear to be important.
Title: spy ware
Post by: Rodders on May 12, 2006, 14:01
Quote from: "sam"
the link on the page to the most cluttered tray is not that impressive, I bet clive has that many icons for spyware programs alone in his tray!

It is my understanding that he's quite keen on his toolbars (http://img.photobucket.com/albums/v300/Mothballs/bars.jpg) too.


Quote from: "mistybear"
Why's that, because it rarely happens.  ;)

Rarely?  Never, at this time of day actually!   8-)


Quote from: "mistybear"
The files to be deleted are "temporary/content.IE5/indx.dat"  and "/cookies/index.dat"

Nope, you can happily zap those, so long as your MS IE cache and cookies have been flushed.  They're just pointers to tell your system where to find files you've since deleted.


  
Title: spy ware
Post by: sam on May 12, 2006, 14:38
hehe, I recall someone suggesting that simons was like that.. and he adamantly denied it...  :P
Title: spy ware
Post by: Simon on May 12, 2006, 19:35
Nope, my screen is uncluttered.  I hate toolbars, and never have them in view, unless needed.  :wahh:

(https://www.pc-pals.com/smf/proxy.php?request=http%3A%2F%2Fwww.avfu59.dsl.pipex.com%2Ftidy.png&hash=612ee8c8e95e5751dc98010213a789fa3cf47485)