• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Finally removed %#@#$ spyware from machine

SP33Demon

Lifer
After running the latest versions of Adaware, SpySweeper, Spybot S&D and HijackThis, the stupid Begin2Search toolbar was still on my machine... and everytime I would lock my IE hosts file, it would lock up my browser because it was trying to add entries to it. Finally I found a site that knew which registry keys this fcking spyware had installed on my machine. Anyone else had problems with this biatch?

This thing made me lose 2 hours of productivity at work, but just glad to have internet access again.
 
Originally posted by: SP33Demon
After running the latest versions of Adaware, SpySweeper, Spybot S&D and HijackThis, the stupid Begin2Search toolbar was still on my machine... and everytime I would lock my IE hosts file, it would lock up my browser because it was trying to add entries to it. Finally I found a site that knew which registry keys this fcking spyware had installed on my machine. Anyone else had problems with this biatch?

This thing made me lose 2 hours of productivity at work, but just glad to have internet access again.

Be careful, a lot of people on this forum will you call you an idiot for having gotten spyware, and that it's your fault and not Microsoft, blah blah blah...

Would you like to write an article for me on my site? If you had such a problem getting rid of it using those common tools you listed, then I'm sure other people are as well.
 
I spent all yesterday evening removing that sh1t from my laptop. I wish I could find the owner of the begin2search site, and kill his whole damn family. Another thing out of the dozen things that were installed was some god damn advetrtisement for damn spyware. Oh that sh1t pisses me off. Look under tools and see if you have it. Makes me want to use something besides IE for sure.
 
Originally posted by: SuperTool
Just use firefox. No worries, mon.

That's the common reply. That will take care of the IE and ActiveX holes, but what about WSH VBScript and Java? Spyware has taken advantage of holes in those as well.
 
Originally posted by: SagaLore
Originally posted by: SuperTool
Just use firefox. No worries, mon.

That's the common reply. That will take care of the IE and ActiveX holes, but what about WSH VBScript and Java? Spyware has taken advantage of holes in those as well.

IE suffers from them in addition to its own holes
 
Originally posted by: Gurck
Originally posted by: SagaLore
Originally posted by: SuperTool
Just use firefox. No worries, mon.

That's the common reply. That will take care of the IE and ActiveX holes, but what about WSH VBScript and Java? Spyware has taken advantage of holes in those as well.

IE suffers from them in addition to its own holes
IE = Paris Hilton?

 
Originally posted by: SP33Demon
Originally posted by: Gurck
Originally posted by: SagaLore
Originally posted by: SuperTool
Just use firefox. No worries, mon.

That's the common reply. That will take care of the IE and ActiveX holes, but what about WSH VBScript and Java? Spyware has taken advantage of holes in those as well.

IE suffers from them in addition to its own holes
IE = Paris Hilton?

:laugh:
 
Originally posted by: SP33Demon
Sht, somehow it's still on my system, it just tried to redirect a window to: http://www.qwikylynx.com/?ou=h...e%2Emicrosoft%2Ecom%2F

WTF, also the word "spyware" is highlighted on the page in orange... at least the toolbar has been removed, but it's still trying to take over my system. Hurry up Adaware/Spybot, we need an update!

Heh. I spent a while at my buddy's house last night fighting that fuggin' program. :|

After I deleted the registry entries you mentioned, I did a search in the registry for "b2s" (no quotes), and deleted all the entries for it there. That seemed to work. He hasn't called me back yet today.

GL
 
Originally posted by: jamautosound
Originally posted by: SP33Demon
Sht, somehow it's still on my system, it just tried to redirect a window to: http://www.qwikylynx.com/?ou=h...e%2Emicrosoft%2Ecom%2F

WTF, also the word "spyware" is highlighted on the page in orange... at least the toolbar has been removed, but it's still trying to take over my system. Hurry up Adaware/Spybot, we need an update!

Heh. I spent a while at my buddy's house last night fighting that fuggin' program. :|

After I deleted the registry entries you mentioned, I did a search in the registry for "b2s" (no quotes), and deleted all the entries for it there. That seemed to work. He hasn't called me back yet today.

GL
I'll try that too, thanks man. I just found C:\WINNT\system32\winb2s32.dll, do I delete this?

 
Originally posted by: SP33Demon
Originally posted by: jamautosound
Originally posted by: SP33Demon
Sht, somehow it's still on my system, it just tried to redirect a window to: http://www.qwikylynx.com/?ou=h...e%2Emicrosoft%2Ecom%2F

WTF, also the word "spyware" is highlighted on the page in orange... at least the toolbar has been removed, but it's still trying to take over my system. Hurry up Adaware/Spybot, we need an update!

Heh. I spent a while at my buddy's house last night fighting that fuggin' program. :|

After I deleted the registry entries you mentioned, I did a search in the registry for "b2s" (no quotes), and deleted all the entries for it there. That seemed to work. He hasn't called me back yet today.

GL
I'll try that too, thanks man. I just found C:\WINNT\system32\winb2s32.dll, do I delete this?

Yup. Forgot about that one.

There were two others in the temp files as well, I can't recall at the moment what they were called. Sorry.
 
Originally posted by: SagaLore
Originally posted by: Gurck
Originally posted by: SagaLore
Originally posted by: SuperTool
Just use firefox. No worries, mon.

That's the common reply. That will take care of the IE and ActiveX holes, but what about WSH VBScript and Java? Spyware has taken advantage of holes in those as well.

IE suffers from them in addition to its own holes

Firefox exploits

Sure, nothing's perfect, and they're right about a browser's popularity linking directly to how many try to exploit it. But IE is still used by 95% of people surfing the internet and has more holes in it. Further, M$ seems to have quite a knack for creating software with these holes, like the recent JPEG exploit. Further yet, Firefox is, imo, much better from a design standpoint and blocks popups far better.
 
I also used Panda ActiveScan. It removed more than the updated Norton AV on his system already. 44 more items, to be exact.

Now that I mentioned that. That's were I found the two entries that were deleted from the temp files. Panda couldn't delete them, but it listed the file names.
 
Originally posted by: jamautosound
I also used Panda ActiveScan. It removed more than the updated Norton AV on his system already. 44 more items, to be exact.

Now that I mentioned that. That's were I found the two entries that were deleted from the temp files. Panda couldn't delete them, but it listed the file names.

i would try Panda but dont trist scientologists....
 
Back
Top