Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#141803 - 09/02/2003 23:34 Spyware problems
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
I've now run Ad-aware multiple times and I still cannot seem to get rid of the effects of one particularly voracious spyware program.

Have any of you run into this "Huntbar" stuff? It's driving me insane! It is unimaginable to me that anyone in their right mind could set something like this loose on the internet. No virus I've ever gotten has caused me more frustration than this thing.

It seems to do pretty much anything it can to hijack Internet Explorer and to implant it's self and links to companies that must support it into the Favorites folder, my desktop, my start menu, my startup folder, and my IE address bar.

I have run Ad-aware several times, and it finds elements of the program, but it must not be eliminating the cause of the thing. I am not using any new programs since this thing hit my system. Before I even installed the latest version of Ad-aware, I found instructions on the internet for hwo to remove the program, and that obviously still hasn't worked.

Does anyone here have any experience with this heinous company or its programs?

ps-I'm planning on buying the first tier Ad-aware program so I can get Ad-watch. Hopefully that will give me a clue as to what I'm doing to cause the program to get reloaded.
_________________________
Matt

Top
#141804 - 09/02/2003 23:48 Re: Spyware problems [Re: Dignan]
tfabris
carpal tunnel

Registered: 20/12/1999
Posts: 31604
Loc: Seattle, WA
I've now run Ad-aware multiple times

I take it this includes the new version of Ad-Aware, and that you've done the latest reference file update for it (there was a reference file update shortly after 6.0 was released)?

If so, then I'd say, let the Lavasoft people know about your problem. I'm guessing the Huntbar people know about Ad-aware and may have figured a way around it. And so the battle begins...

No virus I've ever gotten has caused me more frustration than this thing.

I've long been wishing for a program that would combine adware scanning with virus scanning, so I could do both in one step. But your statement brings up another question: Where does one draw the line between adware and virus? Clearly, this program keeps reinstalling itself when you don't want it. To me, that's a virus, and its authors should be prosecuted to the fullest extent of the law, and given a punishment equal to that given to virus authors.
_________________________
Tony Fabris

Top
#141805 - 09/02/2003 23:54 Re: Spyware problems [Re: tfabris]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
I would have no problem with that whatsoever. I've now gone to their website, and sure they have isntructions for removing it (regsvr32 /u "C:\Program Files\Common Files\MSIETS\msiets.dll"), but that's what I did the last time.

I say if I have hacked my registry at least 6 times, risking my computer's stability, and the program continually gets reinstalled, it is definitely a virus.

Yes, I have the latest reference file for 6.0, and it certainly keeps finding whatever is running, but there must be something else I'm using that installs the programs again and Ad-aware can't see it.
_________________________
Matt

Top
#141806 - 10/02/2003 00:00 Re: Spyware problems [Re: Dignan]
matthew_k
pooh-bah

Registered: 12/02/2002
Posts: 2298
Loc: Berkeley, California
After reading this page:
http://www.doxdesk.com/parasite/HuntBar.html

I'm pretty sure your problem is that you added some site you regularly visit to your "trusted servers" list in IE for running ActiveX controls.

Matthew

Top
#141807 - 10/02/2003 01:00 Re: Spyware problems [Re: matthew_k]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
That's probably it. Is there a way to avoid this problem in the future? I've already done the steps explained in that file, but it obviously came back.
_________________________
Matt

Top
#141808 - 10/02/2003 01:26 Re: Spyware problems [Re: Dignan]
matthew_k
pooh-bah

Registered: 12/02/2002
Posts: 2298
Loc: Berkeley, California
Check internet options -> security -> trusted sites and see what you've got listed. If a site is listed, it can reinstall the toolbar every time you visit one of their web pages. I'd take everything off the list, and see what messages pop up about "wanting to add this site to your list of trusted sites".

Matthew

Top
#141809 - 10/02/2003 01:26 Re: Spyware problems [Re: matthew_k]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
Hmmm, I think another problem was that there were still other problem keys in my registry. I removed several that referred to Sidesearch and Trafficsyndicate. I just wish there were a way to avoid the problem coming back.
_________________________
Matt

Top
#141810 - 10/02/2003 01:27 Re: Spyware problems [Re: matthew_k]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
I don't appear to have anything in that area.
_________________________
Matt

Top
#141811 - 10/02/2003 02:20 Re: Spyware problems [Re: Dignan]
ninti
old hand

Registered: 28/12/2001
Posts: 868
Loc: Los Angeles
Be sure "enable third party browser extensions" is unchecked in the advanced tab of the Internet Options. This is a common way of getting in (got hit by Xupiter recently, which uses that method.)

If Ad-aware is not able to get it, try Spybot. It is a pretty good spyware killer, maybe as good as Ad-aware.
_________________________
Ninti - MK IIa 60GB Smoke, 30GB, 10GB

Top
#141812 - 10/02/2003 09:13 Re: Spyware problems [Re: ninti]
Ezekiel
pooh-bah

Registered: 25/08/2000
Posts: 2413
Loc: NH USA
Spybot does seem to know about it, based on its entry in Spybot's KB. HTH.

-Zeke
_________________________
WWFSMD?

Top
#141813 - 10/02/2003 10:30 Re: Spyware problems [Re: Ezekiel]
Dignan
carpal tunnel

Registered: 08/03/2000
Posts: 12344
Loc: Sterling, VA
Ad-aware knows about it, it just doesn't seem to find the source of it. If it comes back again (*knocks on wood*), I'll give spybot a chance to kill it.
_________________________
Matt

Top