FAQ-Spyware 3

I'm new to all this
Navigation
Quick resource
Internet security
About this site
If you've have the money
Spyware
Additional
Links
Site Search

disclaimer, I cannot be held responsible for any damage caused by following these instructions this is at your own risk

Questions from gavin

every time i try to get into chat rooms the aol .co.uk home page appears also goggle takes for ever than no page appears

Reply from Devilin

Well I didn't do it, honest,

The possibilities are quite literally endless, without more specific details, all I can do is recommend this


Questions from jon h.

spybot s&d stops in mid search and i cannot exit it or shut down computer properly have to turn it off by button can anyone solve.?

Reply from Devilin

Anyone? There's only me here, patients, a watched anti spyware program, never boils, make a cup of coffee, old government Java, is particular nice, if it gets stuck for more than say 10 minutes, uninstall, then re install, failing that try the forums


From Magica De Spell

check this out: http://www.smileycentral.com/ If you ask me...pure spyware. And its a very popular program among yahoo-chat/messenger users.

Reply from Devilin

Now that's spyware there end user agreement is quite comprehensive, http://www.funwebproducts.com/eula/ quote all information collected from a search query is recorded etc. etc. etc.


From Magica De Spell

Oh no! Not again Magica! I am sorry I cant help it! I am glad you are back working at your site! You are the dream of every computer novice. I am sure you must have many messages coming to you. Your site has been the number one that helped me learn so many things, thats why I keep returning here again and again. I have SO MANY questions. Wait, dont go! Just one question this time. :) So much talk about SPAM and how to stop it... does that apply to people who dont use outlook? For I uninstalled outlook on the first day I saw how it works. I thought its too easy to get a virus through such a program that automatically downloads the messages onto the hard disk. Isnt it so? Can one use the methods you describe to stop spamming in our hotmail or yahoo email accounts too?

Reply from Devilin

No this only covers outlook, its the most popular as its already install with Windows and yes, it certainly is the most dangerous mail program, I haven't used hotmail or yahoo, so I've no experience with these alternative programs,

I'll be erratic in my replies for the next month or so, endless rehearsals for the wedding, and I'm changing the sever this site is on, its currently on a friends, I've finally decided to get myself a credit card, I've tried to put it off as long as possible, but hosting sites like this, and some more I have planned, means I need one


From Rose

I feel stupid asking this, but can you tell me what is spyware ? How do you know if it is in your computer ?

Reply from Devilin

Its on your computer, its on everyone's computer, unless there protected


From Kenzie

Me and some friends have been playing a network game online, where someone hosts and we give out our isp addy to allow them in the room. Is this a dangerous thing to do and does it open anyone up to a danger of any kind?

Reply from Devilin

With a decent firewall, and anti virus software running, you're reasonably safe, you're IP address could be used for an attack, but only the elite hackers , could bypass a decent firewall, and the elite hackers wouldn't be interested in a home computer, make sure you've got the latest updates from Windows,


From popuphater

Hello there Love the web site here. But i have a problem i can't seem to solve. I get pop-ups. I have tried spybot s&d and ad-aware as well as spyblaster, all to no avail. I ran them all a few time to try to make they got everything so then i waited and then here they came it pops up acts likes its loading then gose to 404 page not found if i wait long enough ads will start poping up. I have diabled my plag and play and messaging on xp, I whould rather not have to get a pop up blocker but if its the only way then i will this has just started in the last week or so was fine before that Thanks for the great web site also

Reply from Devilin

MMMMMMMM ? what firewall, and antivirus are you using?, I'll assume you're using Xp

Try these they might help

From Magica De Spell

Hi there. I have found another program called spyware guard very useful, that, along with troyan check 6 and sygate firewall, prevented a spyware called ClockSync to install on my pc (although some spyware did get through). All came from a screensaver about StarWars that I downloaded from here http://www.uselesscreations.com/starwars3d/ . Why would they put spyware in a screensaver :(. As time passes, the internet becomes more and more scary!

Reply from Devilin

Hi Magica lost you in the updates soz , this spyware guard ? J

troyan check 6 ? is that a new one ? got a htpp:// for me pls Magica J

ClockSync that's a nasty one,

what some people will do, for money

Magica Hi devilin! troyan check 6 is a german program (freeware) that controlls the changes in the autostart and other procedures (if i have understood correctly). I think its useful for more advanced users as it gives sometimes alert messages, even when no harm is done. Here the url: http://www.trojancheck.de/

Devilin

Ekkkkkkk, its all in German, and not entirely safe, for beginners, although I'm sure you'll have no problems with it

From Magica De Spell

ehm... In fact I did have problems with it (TC6) and unistalled it :)) Spyware guard by Javacool is enough for me. I consider myself a beginner :).

Devilin

Your more of an expert than you'll ever know magic, your curiosity proves that


From Jeff

Devilin, I'm BAAAACK. I have installed Spy Sweeper (the free version) and Spybot, a firewall (Sygate), and Popup Manager. Essentially, I have no complaints, BUT two new pieces of spyware have since entered the lists: Ebates Money Maker and SaveNow-WhenUSave. Spy Sweeper detected them both but said they could not be removed. I was able to remove Ebates manually by going deep into the "regedit" function (Clicked on "Start" and then on "Run"). Unfortunately, Ebates came right back again! And I have not been able to discover where SaveNow-WhenUSave is hiding out so that I can go after it and scrub it out. Any ideas anyone??? I did follow my own advice and wrote my congressman as to spyware. I tell everyone I know to do likewise. Power to the people! Jeff

Reply from Devilin

Hi jeff spy sweeper, the free version, is the pay for version, you have to pay for definition updates, about $29 a year i think :( but spy bot is freeee :-), well donation based, worth a few bucks for all the effort, and hassle

Ebates Money Maker / SaveNow-WhenUSave , I'll investigate, and see what I can dig up

Power to the people! :-0 ooooohhhhhhhhhm yes


Ebates Moe Money Maker , I've been unable to download their software to test it, and I can only assume the information on how to uninstall it, from kephyr is correct, link below, I've read there license agreement, which looks open to abuse by over enthusiastic, affiliate resellers, and there agreement also covers uninstalling any software on your machine that might interfere with there's, this is concerning at least, I'll try again at some point to download their software to run tests,

SaveNow-WhenUSave can be removed, by using a updated version of spybot + Ad-aware

Registry keys below / I recorded a lot more information, if you'd like it, but Spybot + Ad-aware successfully removed it


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\DisplayIcon: "C:\Program Files\Save\Save.exe,1"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\DisplayName: "SaveNow"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\DisplayVersion: "2.60"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\HelpLink: "www.whenu.com"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\Publisher: "WhenU.com, Inc."
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\UninstallString: ""C:\PROGRAM FILES\SAVE\SaveUninst.exe" /rWUSV /kSaveNow /dSaveNow"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SaveNow\UrlInfoAbout: "www.whenu.com"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WhenUSave: "C:\Program Files\Save\Save.exe"
HKEY_LOCAL_MACHINE\Software\CLASSES\WUSN.1\WUSN_Id: C0 99 9F 46 8E CF D8 11 BB D6 00 D0 D7 04 92 E4
HKEY_LOCAL_MACHINE\Software\WhenUSave\Partners\WUSV\Partner: "SNOW0702"
HKEY_LOCAL_MACHINE\Software\WhenUSave\Partners\WUSV\InstallTime: "20040706205138"
HKEY_LOCAL_MACHINE\Software\WhenUSave\Partners\WUSV\PartnerDesc: "SaveNow"
HKEY_LOCAL_MACHINE\Software\WhenUSave\Partners\WUSV\PartnerParam: "dt=Save Now!,q=,i=1"
HKEY_LOCAL_MACHINE\Software\WhenUSave\db_script_update: "1002500002"
HKEY_LOCAL_MACHINE\Software\WhenUSave\InstallDir: "C:\Program Files\Save"
HKEY_LOCAL_MACHINE\Software\WhenUSave\pats_url: "http://akapp.whenu.com/OffersDataGZ"
HKEY_LOCAL_MACHINE\Software\WhenUSave\pat_chunks_url: "http://akapp.whenu.com/DataChunksGZ"
HKEY_LOCAL_MACHINE\Software\WhenUSave\script_url: "http://akdwl.whenu.com/offscript2.html"
HKEY_LOCAL_MACHINE\Software\WhenUSave\update_url: "http://akdwl.whenu.com/saveupdate.exe"
HKEY_LOCAL_MACHINE\Software\WhenUSave\ver_url: "http://www.whenu.com/versions.html"
HKEY_LOCAL_MACHINE\Software\WhenUSave\Version: "2.60"
HKEY_LOCAL_MACHINE\Software\WhenUSave\extra_url: "http://spweb.whenu.com/extra.exe"
HKEY_LOCAL_MACHINE\Software\WhenUSave\extraver_url: "http://spweb.whenu.com/extraver.html"
HKEY_LOCAL_MACHINE\Software\WhenUSave\ziptomsa_url: "http://spapp.whenu.com/ziptomsa"
HKEY_LOCAL_MACHINE\Software\WhenUSave\Partner: "SNOW0702"
HKEY_LOCAL_MACHINE\Software\WhenUSave\LastPartner: "SNOW0702"
HKEY_LOCAL_MACHINE\Software\WhenUSave\InstallTime: "20040706205139"
HKEY_LOCAL_MACHINE\Software\WhenUSave\newuser_rs: "Y"
HKEY_LOCAL_MACHINE\Software\WhenUSave\TotalPartner: "1"
HKEY_LOCAL_MACHINE\Software\WhenUSave\SetupCmdLine: "http://app.whenu.com/Offers?url=SNOW0702&cpartners=0"
HKEY_LOCAL_MACHINE\Software\WhenUSave\PartnerB: "WUSV"
HKEY_LOCAL_MACHINE\Software\WhenUSave\PartnerDesc: "SaveNow"
HKEY_LOCAL_MACHINE\Software\WhenUSave\PartnerParam: "dt=Save Now!,q=,i=1"
HKEY_LOCAL_MACHINE\Software\WhenUSave\FullDBTime: "N"

From Jeff

FYI. As you are a fellow warrior against all spyware, you might want to check out the forum at spywarewarrior.com and review it for the benefit of those who visit "Devilins-fan-club" and/or your anti-spyware website. Have a great day. Jeff

Reply from Devilin

Thanks for the link Jeff, spywarewarrior.com, certainly know what there doing, fine collection of pep's, I'm currently re building the anti spyware site, should take weeks low, I'll add a proper link, etc. etc. when its up , in the meantime

From Jeff

Re Contacting the Wash. State Attorney Genl. as to 180 Solutions: Super idea, but 180 Solutions is not the worst offender. Here is a short list of companies, some of them very well known, that aid and assist companies like 180 Solutions by scanning and attempting to penetrate your firewalls (so that companies like 180 Solutions can insert their spyware?). Attempting to penetrate a firewall is just plain old fashioned "breaking and entering". Doin it via the internet don't make it no better. Don't let these guys get away with it! #erio, Inc. #nglewood, CO; #T&T #orldNet #ervices; #T&T #ell #abs #ake #ary, #L; #OL #ransit #ata #etwork #eston,#A; #west #ommunications; #west #ybercenters; #olorado #uperNet #enver; ##Net #echnologies shburn, #VA; #IPE; #ime-#arner #oad #unner #erndon, #A; #nternet #ssigned #umbers #uthority #arina #el #ay, #A.

Reply from Devilin

There's some large names, mentioned there Jeff, I'd need to independently verify every single one before publishing there full names on this site, for obvious legal reasons, I've always liked, taking on the large names, but I'm extremely cautious doing it, time for some investigation thx jeff


From Boodie

For the past week, pop up ads come up even if I don't have my browser open. I've run ad-aware and spybot several times, but it is still happening. HELP!!!

Reply from Devilin

should sort you out easily, if not contact me again, will do a step by step, analysis


From joybell

When I logged on to the internet I got a blue screen with a yellow window init in asking me to click if it was not my usual home page. It then took me to a soft porn site. Spicy I think the name was. Now I cant get rid of the damn thing. Every time I fire up I get this ble page. Can you help. This is on my work computer...huge company...but just appears when I LOG ON

Reply from Devilin

Hi joybell , without a little more information, like the actual Http;//www.whatever , the only advice I could offer is the general stuft, try this

 


From skriblomaniac

I have incredifind on my PC. How do I remove it?

Reply from Devilin

incredifind, tool bar hijack, Spybot, has it in its database, so it should take care of that pesky spyware for you,

 


From NeMeSis

Does the SPYWEAR spy us when we are offline or only online?

Reply from Devilin

Depending upon what kind of spywear.some spywear continuously logs information.waiting for an opportunity to broadcast the information once you go online.others are only active once you're online.and there's just so much of it about.in such varieties.unless you ask about a specific peace of spywear.even then spywear its being re written.constantly.so what's valid today might not be valid tomorrow.


From Don-Geordie


Does anyone know what has happened to www.ad-eliminator.com? Their website is no longer on line, none of their links work and none of their e-mail addresses work. My program appears to be working, but just can't get in touch with anyone.

Reply from Devilin

ad-eliminator.became ad-eliminator5. a.which I failed.it's another unsuitable anti spyware program. I described it as looking like an expense copy of a free program .Adware with false positives. their website had dead links when I investigated them.they were heavily involved in spam advertised.which may enlightened you to the type of people these are.I say people.I wouldn't be surprised if it was run by single individual.my advice would be not to waste your time.dump the program and download Adware :-)


From Tristen

FAQ---Spyware I'm experiencing the same thing as Crusher. Msg - "Item Trigger tried to perform an action not authorized by the channels security settings and has been stopped" is there everytime I boot up. Find out anything yet?

Reply from Devilin

Errr that's backweb FAQ :-)

Nothing new.I downloaded and check one of possibly 240 backweb variant's no trigger soz


From housewife

a while ago my spyware scanner picked up 3 instances of spyware keykey and keylogger and screenlogger, i blocked them off and when i try to type any thing it freezes the keyboard and i have to turn computer off at the button and then when it reloads i have to do a system restore to get back to normal. can you tell me why???

Reply from Devilin

I shall use my psychic powers to determine the course of the problem. mmmmmmmmmm-ok I haven't got any psychic powers.I'll use logic and probability instead.. you've properly used some lame anti spyware program.there's lots around.and its probably only partially removed the keyloggers.download all three of the anti spyware programs in the free section. spybot-Adaware-spyblaster.and your problems should be over. 3 keylogger's is an unusual amount. mmmmmmmmm ?


From anonymous

hcp://system/panels/subpanels/Search. this came up on my computer what is it ?

Reply from Devilin

it's http://i-look.com.it's an attempt to change your default home page

Read this previous answer.to sort yourself out

 

 

 
All of the written and graphic material on this site are © copyright Devilin art & Devilin code all rights reserved

My just for fun site