My computer keeps downloading spyware even if I don't check any websites. How can I solve this problem?

Question

I peform a scan using Spybot daily, and it keeps digging up a bunch of spyware. Even if I don't check any websites, the same malware appears each time I run Spybot. I suspect that there's some hidden software that is downloading this junk whenever I'm connected to the internet, but that may not be the case.

Does anyone have any advice to offer? Thanks!

Answer 1

If Spybot is finding them and removing them then you need to change the procedure you are using. Remaining in normal mode and connected to the internet is not a good way to romove Malware. This procedure will solve all of that and open areas of your computer for proper scanning and removal.

MALWARE REMOVAL (GENERAL).


Malware is a general word for all form of Viruses, Spyware etc. This procedure works for all Malware. Use the appropriate program.

You might be unable to access the Internet after removing the Malware so you will need to run LSPfix or Winsockxpfix (as appropriate). Download one, but do not run until later, if required.

LSPfix: all Windows OS except 95.

http://www.cexx.org/lspfix.htm

Winsock XP Fix: Windows XP only.

http://www.spychecker.com/program/winsockxpfix.html



UPDATE YOUR ANTI-VIRUS OR ANTI-SPYWARE PROGRAM.


Let's get cleaning

Part 1

• Temporarily show hidden files.

For Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Appearance and Themes, and then click Folder Options.

3.
On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.



For older systems:

1.
Double-click My Computer, click View, and then click Folder Options.

2.
On the View tab, under "Hidden files and folders", click "Show hidden files and folders", and clear (uncheck) the "Hide protected operating system files" check box.


IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


Empty your Internet Explorer cache and your other temporary file folders:

1.
On the Internet Explorer Tools menu, click Internet Options.

2.
On the General tab, in the Temporary Internet Files section, click the Delete Files button. This will delete all the files that are currently stored in your cache.

3.
Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK.

4.
Click OK again.

Restart in Safe Mode:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START RUNNING YOUR SCANNER.


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

If you are unable to access the Internet after removing Malware you will need to run LSPfix or Winsockxpfix (as appropriate).


If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem, removing the need to run Winsockxpfix. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the dialogue box that appears. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


The last steps

If you are running Windows XP or Windows ME, and your computer has been successfully cleaned of Malware, there is one more thing that needs to be done.

Delete any old restore points and then create a new restore one. The old ones may, of course, be infected with the Malware and cannot be used.

First, start and then stop the Restore Service. This is done differently depending on what operating system you are running.

Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Performance and Maintenance, click System, and then click on the System Restore tab.

3.
Select the Turn Off System Restore check box, click Apply, then restart your computer.

4.
Return to the System Restore Tab and turn System Restore back on.


Windows ME:

1.
Click Start, click Control Panel, click System.

2.
Click Performance, click File System, and then click Troubleshooting.

3.
Enable the option Disable System Restore, click Apply then restart your computer.

4.
Return to the Troubleshooting tab and turn System Restore back on.


To set a manual restore point complete the following steps:

1.
Click the Start button.

2.
Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3.
Choose Create a restore point, and then click Next.

4.
In the Restore point description box, type a name for your restore point, and then click Next.

5.
Click OK.

Answer 2

Try turning off System Restore, rebooting into Safe Mode, and running Spybot while in Safe Mode. If it still comes back, go to www.merijn.org and download HijackThis. Run it in Safe Mode and save a logfile, then post the log on a forum that allows HJT logs. You can find them at aumha.org, castlecops.com, etc, or you can go to my site, fixmypcmike.com, and fill out the contact form.

Answer 3

Download AdAware SE from Lavasoft.
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-2

as well as:

Spybot Search and Destroy
http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10122137.html
Theses are Free software and combined have a punch!

Answer 4

You have a program or product that requires them. Search engine or tools, toolbars, and little add ons are offenders. You can eliminate one at a time to find out what goes to which according to what you need or just chuck any unneeded things. This is a commercial world. The free things are the most guilty.

Answer 5

You have a virus that keeps re-installing all of the spyware onto your PC.

Go to the search engine - yahoo - for example.

And type online virus scanner.

This should produce some good sites that will scan your PC for virusses.

Good luck.

Answer 6

get Linux...

Even all of Microsoft Corporation has switched... Microsoft.com, MSN.com, Hotmail.com, the Redmond Campus, all run on 45,000 Linux systems, at 50X faster than they ran on their own dogfood...

Then, also, each Linux system replaced up to a dozen Microsoft servers! Yes, Unix is Professional Grade, not the Toy Systems...

http://pclinuxos.com has 5488 free games, programs, applications... but, NO virus, or trojans, no spy- or mal- ware...

Answer 7

delete all the programs you downloaded through the internet. also if you have a freeware cd that you put on your hard drive, delete that too. then do another spybot run and see if that has taken care of the problem.

Answer 8

Try downlading antispyware.....
It works for me....