PDA

View Full Version : New to S&d and Adware heres my story..



OrEx1
2008-01-14, 21:09
unfortunatly I downloaded addsite from limewire.. .

I knew it was bad after I ran the setup... supposed to be for windows office 2003 but it was addsite...

so when I found that out I delete addsite after dong a search all folders/files with the search on xp...

I keep hearing how lucky I am and how I can register for my free iphones from the kitchen when noones on the computer..

I asked a couple of gamming buddies what I should do.. they told me to dl S&D and then ad aware.. well I run the programs and I see that I have acouple of things wrong so I fix with ad aware.. cool all gone then I search with S&D... couple of things their cant remember what all I started out with.. but I clicked the fix the problems tab and then left..

when I got back home... I ran ad aware again seems that all that is happening now is its finding tracking cookies so then I searched the forum here about tracking cookies and then I dled.. and ran.. vundofix... somthing about cool toobar if i remember correctly.. anyways that seemed to work out pretty good..

I ran S&D again and seems like all that I am getting now is a bluesteak cookie and a double click cookie..

I have changed my cookies setings in my browser.. and raised the security level and checked the box to delete temp files in IE after closing so far this is where Im at now...

Blue steak Cookie
Double click Cookie

I have a feeling you guys need me to dl some files and give you some logs of the findings ....


just tell me what I need to help you guys out and by the way

I have mad respect for what you guys do... I think is awsome..

Zenobia
2008-01-14, 21:48
Do the 2 cookies return after running another scan with Spybot?
And do the problems with adssite seem to be fixed,or are you still having problems?

OrEx1
2008-01-15, 00:32
dled adssite from limewire.... nasty little thing... annoying me on how I won a iphone from the kitchen when the computer is idle...

got ad aware and S&D found adssite deleted it from system 32 dll by doing a search on adssite on here...


cool got rid of adssite. then i run ad aware and S&D again... found tracking cookies... cool ok did a search on tracking cookies..... found about ... vundofix... dled it ran it...


ok some is gone reran S&D cant get rid of cookies.....



Bluestreak
doubleclick
fastclick
tadasaurus



I have a feeling you guys are going to need for me to dl some more applications so just let me know what you need from me and we can get this off of my system



I appreceiate everything you guys do...

mad respect to you guys..

OrEx1
2008-01-15, 00:35
where is this posted at?

OrEx1
2008-01-15, 00:37
yes they return just did a scan yea winning a iphone isnt comming accross my speakers anymore.. so adssite is pretty much gone im just dealing with some tracking cookies now ..

OrEx1
2008-01-15, 04:21
well I have more now that i run it again seems to be the way it goes :)...


bluestreak
doubleclick
fastclick
tadasaurus

all tracking cookies....

Zenobia
2008-01-15, 05:22
If you mean tagAsaurus instead of tadasaurus it is listed as a trojan in Spybot.Is it coming up as a tracking cookie after you scan with Spybot?And do you have the latest updates?

Could you please do this?

Produce a short log (showing items flagged)

Open SpyBot.
Check for problems.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Paste (Ctrl+V) those here.

tashi
2008-01-15, 05:34
Merged two topics.

OrEx1
2008-01-15, 08:57
This forum will let me log in but when i go to post a reply it askes me for my username and password..


I do not know if i have the latest version but this is the most recent scan results that i have..



FastClick: [SBI $61F39AC8] Tracking cookie (Internet Explorer: Owner) (Cookie, nothing done)



--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2008-01-13 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2008-01-09 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-01-09 Includes\DialerC.sbi (*)
2008-01-09 Includes\HeavyDuty.sbi (*)
2007-12-26 Includes\Hijackers.sbi (*)
2008-01-09 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2008-01-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-01-09 Includes\Malware.sbi (*)
2008-01-09 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2008-01-09 Includes\PUPSC.sbi (*)
2008-01-09 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-01-09 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2008-01-09 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2008-01-09 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll

OrEx1
2008-01-15, 09:23
just did another and heres the results of the scan after the one above

Im turning off the computer and going to sleep ill pick this up in the morning..

DoubleClick: [SBI $61F39AC8] Tracking cookie (Internet Explorer: Owner) (Cookie, nothing done)



--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2008-01-13 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2008-01-09 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-01-09 Includes\DialerC.sbi (*)
2008-01-09 Includes\HeavyDuty.sbi (*)
2007-12-26 Includes\Hijackers.sbi (*)
2008-01-09 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2008-01-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-01-09 Includes\Malware.sbi (*)
2008-01-09 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2008-01-09 Includes\PUPSC.sbi (*)
2008-01-09 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-01-09 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2008-01-09 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2008-01-09 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll

spybotsandra
2008-01-15, 11:12
Hello,

Doubleclick (and others like Advertising.com, Avenue A, Inc, CasaleMedia, Fastclick, Hitbox, Mediaplex etc.) are so-called tracking cookies. It is quite common for popular websites to employ such tracking cookies from third parties. They use them in order to track the users' surfing habits on their websites. As I said, these cookies are from third parties but they are employed by the site. There is a tool in Spybot-S&D: BrowserHelper, i.e. a bad download blocker for Internet Explorer. With this tool enabled such tracking cookies will be blocked. In order to activate this tool, please run Spybot-S&D and go to the "Tools"->"Resident" page. Checking the checkbox in front of SDHelper will enable the BrowserHelper.

Now open the Tools menu in your Internet Explorer and choose 'Spybot - Search Destroy Configuration'.
There you will find a drop down menu which will appear giving you some options.
(3rd picture) (http://www.safer-networking.org/en/spybotsd15/index.html)
You should select "Block all bad pages silently".
With that option set the notifications will no longer come up, but you will still have the protection.
Further choose "Spybot-S&D->Immunize" from the navigation bar on the left.
Now the baddies are blocked.

Best regards
Sandra
Team Spybot

OrEx1
2008-01-15, 22:08
Thanks.. now spybot only picks up.. spyware and malware and such..

It would still be good to run a antivirus correct.. like I dont already know the answer.. :)




Congratulations!: No immediate threats were found. ()



--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2008-01-13 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2008-01-09 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-01-09 Includes\DialerC.sbi (*)
2008-01-09 Includes\HeavyDuty.sbi (*)
2007-12-26 Includes\Hijackers.sbi (*)
2008-01-09 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2008-01-09 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-01-09 Includes\Malware.sbi (*)
2008-01-09 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2008-01-09 Includes\PUPSC.sbi (*)
2008-01-09 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-01-09 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2008-01-09 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2008-01-09 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll