I Think I've Been Invaded

[Bart Sr.]

About a month ago I checked my McAfee protection status and found my Antivirus Protection was disabled. Since then I have been getting these "Potentially Unwanted Programs" most often "Cookie 207" and "Cookie Zedo".

Most recently there have been more and more cookies with repeats on some of them.My last scan showed 15 hits but only 10 listed hence the multiples or repeats.

What Can I Do To Stop This!!!!!!!PLEASE HELP!!!!!

 

[tommays]

Re: I Think I've Been Invaded

A free program like spybot search and destroy

http://www.download.com/3000-8022-10122137.html?tag=pao



Will work if nothing to bad has nested in your system

I use the TEA TIMER option when you install it as it does real time monitoring of any attempts to make system changes and the immunize option blocks a lot of bad sights

CCleaner is a nother good free program

Thye will both work better if you F8 and start in safe mode as windows loads the bare min of programs and the nasty stuff cant fight it off as well



Tommays

 

[Nova II 260]

Re: I Think I've Been Invaded

Remove values for the Run line in the registry for all users, follow these steps:
Boot in safe mode.
Wipe all your cookies. start, search, files, cookies, delete all
then,
1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
3. In the right pane, right-click each value except for the "Default" value, click Delete, and then click Yes to confirm.
4. View the related RunOnce and RunOnceEx keys to determine whether a program was not completely installed, and then repeat steps 3 through 5 with different save names to reflect the RunOnce and RunOnceEx keys.

Get a copy of AVG from grisoft

More.....

 

[Bart Sr.]

Re: I Think I've Been Invaded

I must be having a blond week.When you say "boot" do you mean a regular startup or do I need to use the primary program cd that came with the computer?

By the way I have a Dell with XP.

Thanks for the quick responses!!!

 

[seven up]

Re: I Think I've Been Invaded

Greetings.

There are several free security programs available through pc world com. The microsoft web update site also has a run once "malicious software removal tool".

You can insert the addresses of sites to BLOCK when you go to "internet options", "privacy", "sites". I've put in about 40 or 50 tracking cookie sites. Some still get through though.

The AVG written about above has almost daily updates.

 

[Nova II 260]

Re: I Think I've Been Invaded

Regular start-up boot. hold F5 of F8 key and select boot in safe mode.

 

[Bart Sr.]

Re: I Think I've Been Invaded

OK!!!When I get to the RUN registry and RIGHT CLICK the value or size I get:

NEW>

KEY

STRING VALUE

BINARY VALUE

D WORD VALUE

MULTI STRING VALUE

EXPANDABLE STRING VALUE

I don't see anywhere to click YES TO CONFIRM.

What am I doing wrong???

 

[Plainsman]

Re: I Think I've Been Invaded

Right click on the entry itself.

BE VERY CAREFUL IN THE REGISTRY!!! One wrong delete or modify something wrong can make you computer unusable.

I'd make a backup to CD of your important documents before you modify anything.

 

[Bart Sr.]

Re: I Think I've Been Invaded

Yes i made the backup.

After clicking the name do I click MODIFY???

I have been following what NOVA posted before And got this far.

I am sorry for not being computer literate so I'm hoping some of you that are CL will lead me through.

Thanks!!!!

 

[Plainsman]

Re: I Think I've Been Invaded

Choose delete. Except for the Default value like Nova said.

 

[Nova II 260]

Re: I Think I've Been Invaded

go to Internet Options\Security Tab\Restriced Sites Zone.
Add this exactly as seen: *.207.net
to the restricted sites zone and no more cookies from them!

Also you might get this little program:
more good stuff & info

 

[Bart Sr.]

Re: I Think I've Been Invaded

Well it looks like I've got them under control EXCEPT for the "207" whatever it is.

THANKS LOADS for all the help.

 

[Bart Sr.]

Re: I Think I've Been Invaded

OK!I got the thing figured out.It isn't "Two Zero Seven".

It is"TWO O Seven".The middle was a letter - not a number.

Thanks for the help!!!!!!!!

 

[lmddmc]

Re: I Think I've Been Invaded

I think my web browser is broken I click on a marine engine Forum and get
PC diagnostics forum What the hell ?

 

[Gary H NC]

Re: I Think I've Been Invaded

I think my web browser is broken I click on a marine engine Forum and get
PC diagnostics forum What the hell ?

NAAA! Its just the folks on Iboats forums are smarter than the average forum members on those OTHER sites......
With 100,000 members we have everything covered..

 

[Bart Sr.]

Re: I Think I've Been Invaded

 

[Bart Sr.]

Re: I Think I've Been Invaded

Well that didn't last very long.
Some of the cookies are still getting in.They re-direct my links to other sites like Google,Extreme Video and,sometimes,to the BLUE sites.
I tried AVG with no change.I also tried adjusting my security settings and got no favorable results.
I was wondering if Firefox would help.Is it compatible with XP or with my current browser?Does it even have anything that will help?

Thanks for sharing your knowledge.

 

[Xcusme]

Re: I Think I've Been Invaded

Bart...just a quick question.. have you gone to trend micro and done their Free Housecall?? It's easier to goto trend micro with Microsoft Internet Explorer and running the housecall....

Btw, I use Firefox 99% of the time with NoScript add-on...and yes, it's compatable with Xp , 2K etc.

 

[moterboat]

Re: I Think I've Been Invaded

I got infected by a program called antivirgear,is this what you have??,
it sneaks into your pc and downloads itself along with a bunch of trogen viruses,go to thier website and it promps you to pay them for other software to remove it,everytime I tried to manuely remove a file,it made a copy.I found a program called www.superantispyware.com , its a free trial,and it will remove all from your computor,just use it and don't purchase it... I tried a few others but they could not find the infection,its new.... good luck,it took me 10 hrs of experimenting before I found this program.it hides in the registry and other parts of windows.

 

[orion25]

Re: I Think I've Been Invaded

Google a program called Hijack This. Run it and then go to a hijackthis forum and paste the results it gave. You will get more help than you ever thought was possible!

I have never had to use this personally but I have fixed friends computers with this method on numerous occasions.

Or you could do a reformat and reinstall of windows and all problems would go away. Just be sure to back up key files and documents first. After you get it fixed (or before) get a router. Even if you have only one computer almost all routers have firewalls built in that can help protect you. Then make sure you are running a software firewall (Zonealarm is a good free one) and antivirus (AVG is free).