F***ing Spyware

PityOnU · 02-12-2007, 03:25 PM

I downloaded what was supposed to be a WMP plugin, and it installed a thing called SpyDawn, which was supposed to be a Virus Protection program, blah, blah, blah, blah.

Anyway, I got rid of all that faster than I could say "F***, I can't believe I downloaded that stuff." Can you say malicious software? Luckily I had Unblocker, because the darn stuff wouldn't let me delete it.

It's all off now, but I'm still left with a System Tray icon that says "Your computer is at risk!" and flashes red and takes you to the SpyDawn website.

Is there any application that lets you see what's going on in your System Tray or is there a registry file I can easily modify to get rid of this thing?

SauliusM · 02-12-2007, 05:35 PM

You can try going to Start -> Run -> and type in "msconfig" (without the quotes)
Then goto the startup tab and see if there is anything that rings a bell that could be this spydawn crap.

Pierce28 · 02-12-2007, 06:18 PM

Also, CTRL - ALT - Delete, look at the task manager, and exit out of anything that may resemble it.

Also, look for what I refer to as "kickstands". There is probably a real name for it, but I don't know it. Basically, what it is is another file hidden away on the hard drive that detects if the spyware/virus has been removed, and if so, it restores it.

I one time had to write a mini-virus to protect myself (LONG Story involving WoW characters being sharded). Luckily, it never had to be used, but you better believe it had a "kickstand". (Who said Visual Basic was worthless?)

Just be careful and DO NOT enter any personal information into the computer after you know for SURE everything is gone.

EndUnknown · 02-12-2007, 06:50 PM

Quote:

Originally Posted by PityOnU

I downloaded what was supposed to be a WMP plugin, and it installed a thing called SpyDawn, which was supposed to be a Virus Protection program, blah, blah, blah, blah.

Anyway, I got rid of all that faster than I could say "F***, I can't believe I downloaded that stuff." Can you say malicious software? Luckily I had Unblocker, because the darn stuff wouldn't let me delete it.

It's all off now, but I'm still left with a System Tray icon that says "Your computer is at risk!" and flashes red and takes you to the SpyDawn website.

Is there any application that lets you see what's going on in your System Tray or is there a registry file I can easily modify to get rid of this thing?

I got a similar virus, and a system restore cleared it up.

Zuneologist · 02-12-2007, 06:54 PM

Quote:

Originally Posted by rock4christ

Quote:

Originally Posted by PityOnU

I downloaded what was supposed to be a WMP plugin, and it installed a thing called SpyDawn, which was supposed to be a Virus Protection program, blah, blah, blah, blah.

Anyway, I got rid of all that faster than I could say "F***, I can't believe I downloaded that stuff." Can you say malicious software? Luckily I had Unblocker, because the darn stuff wouldn't let me delete it.

It's all off now, but I'm still left with a System Tray icon that says "Your computer is at risk!" and flashes red and takes you to the SpyDawn website.

Is there any application that lets you see what's going on in your System Tray or is there a registry file I can easily modify to get rid of this thing?

I got a similar virus, and a system restore cleared it up.

your lucky. because sometimes even that doesnt work

PityOnU · 02-12-2007, 07:00 PM

Yeah, my systm restore didn't do anything either.

Getting that darn stuff off was a pain in the butt >

Zuneologist · 02-12-2007, 07:09 PM

Quote:

Originally Posted by PityOnU

Yeah, my systm restore didn't do anything either.

Getting that darn stuff off was a pain in the butt >

so how did you get rid of it?

PityOnU · 02-12-2007, 07:10 PM

Quote:

Originally Posted by SauliusM

You can try going to Start -> Run -> and type in "msconfig" (without the quotes)
Then goto the startup tab and see if there is anything that rings a bell that could be this spydawn crap.

I tried that, but it didn't work. Good idea, though. I had no idea that even existed.

As for the "kickstands", this thing didn't have any, it was just superglued to my harddrive. I had to have Unblocker remove it at startup (I think that answers your question Zuneologist).

I know for sure I got all of the files for that stuff off of my computer, I'm just stuck with that stupid flashing icon in my system tray >

God I hate this thing...

P.S. - I remember that when I used to get stuff like this in my old computer, my dad would just go into the registry and all of the stuff like thaat would be in one folder that was like "Run at Startup" or something... Anyone know of this?

SauliusM · 02-12-2007, 07:28 PM

This could be it...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

PityOnU · 02-12-2007, 07:32 PM

Quote:

Originally Posted by SauliusM

This could be it...
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

Yeah! That's where it was!!! ;D +rep

Huh? WTF? There's nothing that is wierd here! How the heck is that thing running??????

SauliusM · 02-12-2007, 07:53 PM

You can try looking in HKEY_CLASSES_ROOT for anything that has SpyDawn in it.

Wmc90 · 02-12-2007, 10:02 PM

Go through a scan with AVG Antispyware http://free.grisoft.com/doc/20/lng/us/tpl/v5
And have a quick look through with HiJackThis http://www.majorgeeks.com/download3155.html

Ive had to clean lots of nasty sh*t like that, and those two usually sort it out.
Do that along with some general snooping in the registry and your hard drive.

Pierce28 · 02-13-2007, 03:53 AM

Also, if and ONLY IF you know what you are doing and you have a copy of your windows install CD on hand with all your other drivers, a clean format will remove ALL the spyware... including your OS and all your files too, though.

Formatting = Fixes any software problems, but should only be used if you know what you are doing and as a last resort. If you have bought your computer from a company, they can do it for you, but they charge some crazy fee. If you have the CDs and don't trust yourself, ask a friend who can. As for payment, offer to buy them a pizza. I know if someone asked me to format their hard drive for a pizza, I'd do it

PityOnU · 02-13-2007, 05:32 AM

Yay! That stupid icon is gone!!! I don't know wht I did, but I restarted my computer this morning and it's not there anymore! Yay!

I also ran a scan with Norton, and there are no "Risks" on my computer (except a cookie from this site, hmmm... :shifty eyes

.

Looks like that's the end of it. Thanks for the help, guys. +rep all around ;D

putis · 02-13-2007, 09:24 AM

Quote:

Originally Posted by PityOnU

...and there are no "Risks" on my computer (except a cookie from this site, hmmm... :shifty eyes

.

That cookie allows zB to monitor all of your daily activities by scanning your neurological patterns everytime you log in.

lpxxfaintxx · 02-13-2007, 01:05 PM

OMFG PUTIS. Why'd you tell him?

VantageX4 · 02-21-2007, 08:37 PM

Try CCleaner. It cleans a lot of registry entries and it might help to solve your problem.

02-12-2007, 03:25 PM	#1 (permalink)
PityOnU Super Zuner Join Date: Jan 2007 Location: In the real world Posts: 1,987 Reputation: 134	Fing Spyware* I downloaded what was supposed to be a WMP plugin, and it installed a thing called SpyDawn, which was supposed to be a Virus Protection program, blah, blah, blah, blah. Anyway, I got rid of all that faster than I could say "F***, I can't believe I downloaded that stuff." Can you say malicious software? Luckily I had Unblocker, because the darn stuff wouldn't let me delete it. It's all off now, but I'm still left with a System Tray icon that says "Your computer is at risk!" and flashes red and takes you to the SpyDawn website. Is there any application that lets you see what's going on in your System Tray or is there a registry file I can easily modify to get rid of this thing?

02-12-2007, 05:35 PM	#2 (permalink)
SauliusM Banned Zuner Join Date: Nov 2006 Posts: 61 Reputation: 10	Re: Fing Spyware* You can try going to Start -> Run -> and type in "msconfig" (without the quotes) Then goto the startup tab and see if there is anything that rings a bell that could be this spydawn crap.

02-12-2007, 06:18 PM	#3 (permalink)
Pierce28 zB Programmer Member Join Date: Dec 2006 Location: North Carolina Posts: 592 Reputation: 62	Re: Fing Spyware* Also, CTRL - ALT - Delete, look at the task manager, and exit out of anything that may resemble it. Also, look for what I refer to as "kickstands". There is probably a real name for it, but I don't know it. Basically, what it is is another file hidden away on the hard drive that detects if the spyware/virus has been removed, and if so, it restores it. I one time had to write a mini-virus to protect myself (LONG Story involving WoW characters being sharded). Luckily, it never had to be used, but you better believe it had a "kickstand". (Who said Visual Basic was worthless?) Just be careful and DO NOT enter any personal information into the computer after you know for SURE everything is gone. __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

02-12-2007, 07:00 PM	#6 (permalink)
PityOnU Super Zuner Join Date: Jan 2007 Location: In the real world Posts: 1,987 Reputation: 134	Re: Fing Spyware* Yeah, my systm restore didn't do anything either. Getting that darn stuff off was a pain in the butt >

02-12-2007, 07:28 PM	#9 (permalink)
SauliusM Banned Zuner Join Date: Nov 2006 Posts: 61 Reputation: 10	Re: Fing Spyware* This could be it... HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

02-12-2007, 07:53 PM	#11 (permalink)
SauliusM Banned Zuner Join Date: Nov 2006 Posts: 61 Reputation: 10	Re: Fing Spyware* You can try looking in HKEY_CLASSES_ROOT for anything that has SpyDawn in it.

02-12-2007, 10:02 PM	#12 (permalink)
Wmc90 Experienced Zuner Join Date: Nov 2006 Posts: 131 Reputation: 20	Re: Fing Spyware* Go through a scan with AVG Antispyware http://free.grisoft.com/doc/20/lng/us/tpl/v5 And have a quick look through with HiJackThis http://www.majorgeeks.com/download3155.html Ive had to clean lots of nasty sht like that, and those two usually sort it out. Do that along with some general snooping in the registry and your hard drive. __________________ Black Zune 30Gb - Charcoal N95 w/4Gb microSD (waitin' on those 8G SDHCs!) Shure E4C [OTG] - Sennheiser HD595 [@Home] - LittleDot Micro+ Amp To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.*

02-13-2007, 03:53 AM	#13 (permalink)
Pierce28 zB Programmer Member Join Date: Dec 2006 Location: North Carolina Posts: 592 Reputation: 62	Re: Fing Spyware* Also, if and ONLY IF you know what you are doing and you have a copy of your windows install CD on hand with all your other drivers, a clean format will remove ALL the spyware... including your OS and all your files too, though. Formatting = Fixes any software problems, but should only be used if you know what you are doing and as a last resort. If you have bought your computer from a company, they can do it for you, but they charge some crazy fee. If you have the CDs and don't trust yourself, ask a friend who can. As for payment, offer to buy them a pizza. I know if someone asked me to format their hard drive for a pizza, I'd do it __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

02-13-2007, 05:32 AM	#14 (permalink)
PityOnU Super Zuner Join Date: Jan 2007 Location: In the real world Posts: 1,987 Reputation: 134	Re: Fing Spyware* Yay! That stupid icon is gone!!! I don't know wht I did, but I restarted my computer this morning and it's not there anymore! Yay! I also ran a scan with Norton, and there are no "Risks" on my computer (except a cookie from this site, hmmm... :shifty eyes. Looks like that's the end of it. Thanks for the help, guys. +rep all around ;D

02-13-2007, 01:05 PM	#16 (permalink)
lpxxfaintxx Administrator Ultimate Zuner Join Date: Jul 2006 Location: Fullerton, CA Posts: 5,837 Reputation: 259	Re: Fing Spyware* OMFG PUTIS. Why'd you tell him? __________________ To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts. To view links or images in signatures your post count must be 0 or greater. You currently have 0 posts.

02-21-2007, 08:37 PM	#17 (permalink)
VantageX4 Squirt Join Date: Dec 2006 Posts: 13 Reputation: 10	Re: Fing Spyware* Try CCleaner. It cleans a lot of registry entries and it might help to solve your problem.

Advertisement