OT: Spyware

[Ragnarok]

Originally posted by Ragnarok-X:
about the hijacking of browers, search the net for "hijack this". Its a tool to clean browsers of hostile plugins

Already had that one as well. But the homepage is not being hijacked. Only thing on the browsers is under the address bar there were, at one time, 4 or 5 different search bars installed. But now I have removed those.

These are some fine tips and I'm sure they will help others in the future, so keep them coming.

[Raging Deadstar]

Can anyone picture a digitalised Version of ragnarok appear on screen like rambo armed with all the different spyware destroying programs we've recommended...

[Timstone]

It must be something like the worm from Worms 1. You know the one that fell over because of his heavy weapon loadout.

[Raging Deadstar]

You haven't lived till you've seen "Mullet Time" cut scene from Worms 3D

[Ragnarok]

Originally posted by Raging Deadstar:
Can anyone picture a digitalised Version of ragnarok appear on screen like rambo armed with all the different spyware destroying programs we've recommended...

*Says in deepest voice possible while holding all spyware destroying tools* DIE EVIL SPYWORM THINGY, DIE!

[Will]

At work, I've helped to develop a checklist of things to go through for spyware/virus infected systems. Since most of the time it's bad enough to call into the helpdesk because work can't get done, the list is *very* comprehensive:

1) Run Windows Update.
2) Clean out Symantec AV Quarantine, Backed Up Items, and Repaired Items. Empty Recycle Bin, Temporary Internet Files, and Cookies. Empty Deleted Items folders in MS Outlook.
3) Run full SAV scan (check that client is on managed server, and definitions are up-to-date). Auto-clean, then use the manual removal instructions for each virus to ensure proper removal.
4) Use TrendMicro's Housecall Online virus scan, set for auto-clean. Follow manual removal instructions for any viruses found to ensure removal.
5) Run both SpyBot S&D (scan & immunize), and AdAware (scan).
6) Install and run Vision, to monitor computer's network traffic.
7) Run full SAV scan again.

A bit extreme, and at least a half-day affair (longer for the end-Users that have insane numbers of files, like 400,000). But so far it has cleaned up all the nasty infestations we've had. If the system doesn't have any data that needs to be saved though, usually it's just re-imaged and we forget about it.

[dogscoff]

Not all anti-spyware is what it seems:
http://www.spywarewarrior.com/rogue_anti-spyware.htm