pd123

I told my friend to install Spybot, instead he installed Spybotware. It seems hard to uninstall and it wants $19.95, any suggestions what to do, how to get rid of it? If I do a "System Restore" that comes with XP, should that take care of it or is it impeded somehow?

Prngr44

I'd think if you had a restore point before the install you should be ok.

DarkFury

NUKE IT!!!

But yeah... try the restore point first. Trojans like that SUCK!

It's cases like this where Ghost seems "most valuable".

__________________


DarkFury's Pimptopia - Don't Hate the Playa, Hate the Game!
Home of the Original OG Pimp (accept NO imitations)

pd123

Thanks, I'll do that, should I uninstall it first or not fool with uninstalling, just go to a restore point? Thank you again for the advice.

DarkFury

I'd say..."go for the restore point".

Didn't you already say that you tried to uninstall it and it refused to go away?

If all else fails... NUKE IT!!!!! and then be sure to make a clean Ghost copy of your fresh re-install.

pd123

Yes, it was uninstalled, then the real Spybot was run, it found remnants of it, they were deleted, Spybot run again after a reboot, found it again. I just did the restore, I need to install Spybot again, (lost it in the system restore) and run it again and hope it won't find it again. Thank you for your help

Paymaster

Be careful, there could be all kinds of uninvited stuff on your system now.

If he uses that machine for online banking or anything of that sort, I would be very wary of checking for any last remaining chunks of spyware. Run windows defender, spybot, adaware, do a full virus scan, etc.

__________________
"eh, take your opinion and shove it... somewhere else other than this thread" ~ welfareloser

LPMiller

many spyware programs install themselves in the system restore file, which is why it keeps cropping up. You need to do some googling on the proper way to truly kill it.

__________________
lpmiller
Chief News Editor
Nobel Prize Nominee
Reverend in the Universal Life Church
Once Shot A Man For Snoring Too Loud
Way Too Lazy To Change His Signature

"The strength to change what I can, the inability to accept what I can't, and the incapacity to tell the difference." - Calvin and Hobbes

GeazyRider

If you are having a hard time getting rid of this even after a system restore, open Task Manager/Processes and end the program.

Then open Regedit and Edit/Find Spybotware, and remove all related references to it.
Also look in all hives/Software/Microsoft/Windows/Current Version/Run and delete amy references to thos program.

This usually works for me for most rogue apps which won't uninstall.

Giles

DarkFury

If all else fails... NUKE IT!!!


Droppin' bombs on yo Mom's... F' Car alarms...

mechmike0034

Yup!

Here's the drill - John's Malware Guide

Use IzArc instead of the WinRAR mentioned (If you need a compression/decompression app).

Use Dial-a-fix instead of the Winsock Repair Tool mentioned.

The rest of the article is pretty spot-on.

Once the system's clean, that same article has some security suggestions, and I would also read and follow the Secure XP page to prevent recurrences.

__________________
"The price of progress is trouble." (C. F. "Boss" Kettering)
"50% of the American public has below-average intelligence. 70% of the American public now has regular access to the Internet. Do the math." (unknown)

pd123

mechmike, very interesting article.