Adware, Spyware, Viruses.

[CarlS]

Spybot lists OnlinePcFix.SpyFerret (10 entries) as spyware, it prints it in red, am i suppose to delete it permanently? (!!)

SpyFerret is a theft of Spybot's code is why it is included in Spybot's database. It is not a spy program and does not contatain hidden malware.

Simply because it is a ripoff of Spybot S&D, I would let Spybot remove it from the system.

"OnlinePCFix offer a utility called SpyFerret; Ideal World Online offer SpyGone. All have copied Spybot Search and Destroy’s definitions database without permission or attribution; additionally, SpyFerret includes actual program code taken from Spybot, and SpyGone is an unlicensed copy of SpyRemover. " from http://www.doxdesk.com/parasite/

[Star-Com]

[Star-Com]

In Spybot, Search & Destroy pane, i press the tag Check for problems and i get a list of spyware.

One of the items in the Problem column is DSO Exploit and under the Kind column says 5 entries. I select this DSO Exploit item and press the Fix selected problems tag.

I get the answer, Confirmation, 5 problems fixed.

I press OK.

When i check for problems again this DSO Exploit is still there with 5 entries!

I check in the Recovery pane and i see two columns, one for Backup of the items and on the far right a list of numbers, the number of problems fixed, i suppose.

The number on the right of DSO Exploit increases (!) by 5 (10,15,20,25 etc) after every ''check for problems'' and ''Fix selected problems'' procedure.

Any ideas what this DSO Exploit is? It seems that it makes a copy of itself every time it goes into quarantine!

Thank you.

[glc]

This is a bug in Spybot, and will be fixed in the next update, if it isn't already fixed. It's nothing to worry about as long as all your Windows critical and security updates are current.

[Star-Com]

What Spyware & Adware to delete?

When you scan your PC using say Spybot some Spyware or Adware is shown on the list.

Can you find those spyware/adware programs' origin?
I mean the initial software that the Spyware or Adware was bundled to?

Because, after all you have to know what to quarantine or completely remove so as to avoid having any problems with any program (that is of course related to the spyware or adware) from running improperly.
What if you delete something (which maybe is marked in Red) and that file/program handicaps something useful?

Say, if you download drivers for your PC components or some Suite for say your Graphics Card or whatever else useful, is it possible that the relevant sites bundle some adware or cookies to the software you download, and you delete that adware or cookies using Spybot thus disabling some useful software?

Please elaborate a bit on the above, to make clear how we should decide what to remove using Spybot or Ad-aware or any similar products.

[CarlS]

Most of the adware/spyware comes with "free" programs that you download. The paid versions of these programs generally do not contain the adware. With a lot of these freeware programs, when you get rid of the adware, the program will no longer work. So you have to make a choice, use the freeware and tolerate the adware or get rid of the adware and the program. I choose not to run anything containing adware or spyware.

I hope this helps.

[kev7555]

I have deleted every item ever detected by adaware and spybot for years and it has never effected any of my programs.

[Star-Com]

Q1. Below is some Spyware/Adware that appear on the list, after Spybot ''Check for problems'' process:

1. Hitbox (Tracking cookie)
2. DoubleClick (Tracking cookie)
3. Advertising.com (Tracking cookie)
4. Alexa Related (Replace file)
5. Avenue A, Inc. (Tracking cookie)

Any ideas where does the above Spyware/Adware come from? What their host programs are?

Q2. Does Spyware/Adware appear in the Windows Task Manager - Processes list?

[CarlS]

For a good explanation of cookies in general and tracking cookies in particular, visit this site: http://www.cookiecentral.com/c_concept.htm

As you will read in the above link, you get cookies when you visit sites that use them. Advertisers on PCMechanic use tracking cookies. I simply delete unwanted cookies after an online session. PCMechanic also has cookies that store your logon so that you don't have to sign in everytime you post. Cookies like that are OK. Ebay also uses those kinds of cookies.

If you are using IE as a web browser, you can set it to accept only session cookies and to reject all third party cookies. You can also set it to block all cookies; but that setting will prevent you from logging into some sites.

Alexa is part of IE's search function and the jury is out on whether it is really spyware or not. Folks on this site have recommended downloading and installing Google Toolbar which has no spyware.

[Star-Com]

If you are using IE as a web browser, you can set it to accept only session cookies and to reject all third party cookies.

I use IE 6. Please explain what are the session cookies and the third party cookies and how i can set the IE to filter out what i don't want.

CarlS and all the other people, thank you for your replies.

[CarlS]

Session cookies are cookies that are used while you are on line at a particular site, by that site, to keep track of where you have visted in that site. This makes it easier for you to navigate. On the PCMechanic site, the session cookies mark which threads you have read, for example. This is for your convenience and is not tracking your surfing. Sites like Ebay use cookies to keep track of your purchases or items in you shopping cart.

Third party cookies are cookies you get when you visit a site but are not downloaded to your computer from that site. They come from a third party. These are advertising cookies. Many advertising cookies are harmless. They simply tell the advertiser that you saw an ad on a specific page of a specific site. This is how an advertiser knows that X number of people saw their ad. Some advertising or third party cookies track your surfing and gather information to send you advertising relating to the products or sites you have visited.

This is an oversimplification; but I hope you get the jist.

The easiest way to block third party cookies, accept first party cookies, and accept session cookies is a follows:

In IE, click on "Tools" then select "Internet Options". Next click on the "Privacy" tab. Now select the "Advanced" button.

Check the block that says "Override automatic cookie handling". In the "First Party Cookie" column, click on the "Accept" button. In the "Third Party Cookie" column, click on the "Block" button.

Now check the box that says "Allow session cookies". Click OK and Apply and you're finished. Note that you can tell IE to prompt you before accepting cookies; but this can be a real pain. Try it if you like.

I use Karen's Cookie Viewer, one of Karen's Power Tools, to review and delete unwanted cookies. It is a free program, simple to use, and Karen is reliable. http://www.karenware.com/

[Star-Com]

Q1. The Spyware/Adware that i mentioned on an earlier post, which appear on the list (they are marked in red), after Spybot ''Check for problems'' process:

1. Hitbox (Tracking cookie)
2. DoubleClick (Tracking cookie)
3. Advertising.com (Tracking cookie)
4. Alexa Related (Replace file)
5. Avenue A, Inc. (Tracking cookie)

can be put into quarantine or completely deleted with no problem, yes?

Q2. Does Spyware/Adware show up in the Windows Task Manager - Processes list? (i asked this in an earlier post but there was no answer to this).

Thank you.

[Hi Ho]

When I run Spybot I delete everything in red. Yes, you can safely delete the ones you have found. Spybot and Adaware only show up in the task manager if you have it open. Don't worry about deleting something that shouldn't be deleted. Just remove everything Adaware picks up and everything that Spyware picks up in red. I have been doing that forever and I have never had a problem.

[glc]

Spyware and adware (NOT Spybot and Ad-Aware, Hi Ho) may or may not show up in the task manager. Each case is an individual case.

You are getting way too worried about cookies. Deleting cookies found by Ad-Aware and Spybot never causes problems, cookies have nothing to do with running processes and dependencies.

[Hi Ho]

Spyware and adware (NOT Spybot and Ad-Aware, Hi Ho) may or may not show up in the task manager.

Good catch. lol Those words are too similar.

[Star-Com]

How can it be figured out what is a virus and what is Spyware/Adware?

I mean when you see something like ..... .exe (say, knjlvnb.exe) can you tell the nature of that application whether it is a virus or anything else?
How can you find out what it is?

[Hi Ho]

THIS website will tell you what it is. If it's not on there and it's jumble of letters then it is probably no good. My suggestion is to stop worrying and remove everything Spybot and Adaware find. I haven't heard of anyone have problems.

[CarlS]

Star-Com,

When I first started using Spybot and Adaware, I was as cautious as your are. Now, whenever either find anything, I just axe it. You can find most all legitimate processes on the link Hi-Ho gave you. If you don't find it there, do a Google search. Most every trojan and spy program will be found via a Google search.

Don't spend too much time worrying about cookies. If Spybot and/or Adaware find tracking cookies, delete them. Cookies are not in the same league as trojans and spyware.

Just by looking at an .exe name, you cannot tell what that exe file does unless you are familiar with that particular exe file. Whe in doubt, research it. If you can't find it via a Google search or the link HI=Ho gave you, post the question in this forum.

[Star-Com]

I hope the people who are concerned about the concepts of Security & Privacy find the links listed below useful and informative so as to find answers and effective solutions to the issues that are discussed in this thread.

Adware, Spyware, Virus - Definition

How Computer Viruses Work - Howstuffworks

Viewz - Top 10 Virus Prevention Tips

Symantec Security Response

Online Security & Privacy

Tech Support Guy Forums - Security Help Tools

Cookie Central

doxdesk.com parasite

Choosing a Spyware,Adware Remover - Reviews

Ad-aware - Reviews and free downloads at Download.com

Spybot - Search & Destroy - Reviews and free downloads at Download.com

[hyg71886]

Originally Posted by ghost2003 spyware blaster stop spyware from comming in in the first place and spyware guard is a resident scanner. you can get them at www.javacoolsoftware.com and lobos just told me about a nice little program called winpatrol www.winpatrol.com that tells you every time settings have been changed or programs have been installed and would stop spyware from installing.

I couldnt stand that little dog, does it really work good though?

[ghost2003]

Works well. Every time I change a important setting it asks me if I want to keep it or put the old one back.

[hyg71886]

Originally Posted by ghost2003 Works well. Every time I change a important setting it asks me if I want to keep it or put the old one back.

Did you get the free one or buy it? And have you ever heard of SpamDrop™? Heres the link. Does it work? SpamDrop

[gunguy09]

i allso have spywere blaster

[Lobos]

If you have a problem with winpatrol
There support forum is over at CC (Computer Cops)

[Star-Com]

Hello,
It happened a few times, when i keep the Task Manager-Performance window open,
(minimized at the bottom-right of the screen, and showing CPU activity)
to see the CPU Usage to be as high as 98% or 100% (!!) without actually having any of the programs i usually use running.

That means some kind of process is running in the backround isn't it?

Any suggestions on how to find out what is happening during those times when CPU looks excessively loaded?

[CarlS]

svchost.exe, part of the XP operating system, will do this on my computer at times. I have no idea why. It is normal.

[Star-Com]

Originally Posted by CarlS svchost.exe, part of the XP operating system, will do this on my computer at times. I have no idea why. It is normal.

Could you please tell me how you figured out that svchost.exe is the process that sometimes loads up the CPU?
How can one check out what resources a process uses at different times?

[CarlS]

I was watching the online activity on my computer in Zone Alarm and it showed me that svchost.exe was active. Also, some one else mentioned it in a post in this forum. Microsoft Knowledge Base has an extensive explanation of svchost.exe.

[Star-Com]

In recent PC Mechanic ''Tip of the Day'' issues, a spyware remover called Spyware Nuker has been advertised;

Spyware Nuker

It looked good and i checked it out; however at the doxdesk web page,

http://www.doxdesk.com/parasite/rogu...l#backstabbers

Spyware Nuker is listed under the :

Non-recommended anti-parasite software The hypocrites Anti-parasite software that is marketed by companies involved in writing, distributing or controlling parasites themselves.

Some explanation is given in the doxdesk article ending with :

The currently-available version SpywareNuker/pcOrion 2004/2005 is a complete rewrite and fixes these problems at least, however Trek8’s reputation remains deservedly tainted. SpywareNuker has also been widely promoted through spam.

I guess the explanations given in the article are adequate for the, well, integrity of the software; considering also that this particular software has been promoted by PC Mechanic which is a credible source of information.

What do you think? Is it worth purchasing?

[CarlS]

I wouldn't just on principle. Have you tried MS's new spware removal program? It's free for now. I am satisfied with Spybot and Adaware, thus I don't need to purchase a syware removal program. I will try MS's new program.