spywad

[Leythos]

In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
says...
> Arovax tells me spywad each week and points to user and machine:
> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
> complete restore of said machine, without change. I have been to
> KellysKorner, and a multitude of honorable forums trying to find the
> answer.

That can't be correct - if you had done a complete restore from clean
media you would not have these problems you describe.

It's time to actually do a wipe/reinstall, where you actually format the
drive and erase all data/files - this, provided you get a clean set of
install CD's, will give you a working machine that doesn't contain
malware.

After that, before you connect to the internet, you need a working
firewall to allow you to connect without being compromised while getting
updates and patches....

If you have the XP cd you could also try a repair/reinstall of XP, but
you could easily re-compromise your system.

http://www.michaelstevenstech.com/XPrepairinstall.htm


--
Leythos - spam999free@rrohio.com (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS1.COM that
create filth and put it on the web for any kid to see: Just take a look
at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive.../t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.

[Default User]

On Wed, 22 Aug 2007 10:58:53 -0400, Leythos <void@nowhere.lan> wrote:

>In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
>says...
>> Arovax tells me spywad each week and points to user and machine:
>> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
>> complete restore of said machine, without change. I have been to
>> KellysKorner, and a multitude of honorable forums trying to find the
>> answer.
>
>That can't be correct - if you had done a complete restore from clean
>media you would not have these problems you describe.
>
>It's time to actually do a wipe/reinstall, where you actually format the
>drive and erase all data/files - this, provided you get a clean set of
>install CD's, will give you a working machine that doesn't contain
>malware.
>
>After that, before you connect to the internet, you need a working
>firewall to allow you to connect without being compromised while getting
>updates and patches....
>
>If you have the XP cd you could also try a repair/reinstall of XP, but
>you could easily re-compromise your system.
>
>http://www.michaelstevenstech.com/XPrepairinstall.htm

I agree with Leythos - time to cut your losses by completely wiping and
reloading your system. I always recommend that when reinstalling your
system due to a malware installation, that you go take extra step of nuking
the entire disk. The reason being that malware can remain on a disk after
a "format" if the format does not actually write to the sectors where the
malware resides. Use "Boot 'n Nuke" and run several passes to be sure the
disk is clean http://dban.sourceforge.net/ .

[Dustin Cook]

Default User <default@user1.invalid> wrote in
news:g7moc317jp1uddu9uk817f3qmlnjrn8a5e@4ax.com:

> On Wed, 22 Aug 2007 10:58:53 -0400, Leythos <void@nowhere.lan> wrote:
>
>>In article <mn.b1b57d781b5dbf29.70004@nonegone.com>,
>>faux@none_gone.com says...
>>> Arovax tells me spywad each week and points to user and machine:
>>> Software-Microsoft-Windows-Curr.Version-Policies........I have done
>>> a complete restore of said machine, without change. I have been to
>>> KellysKorner, and a multitude of honorable forums trying to find the
>>> answer.
>>
>>That can't be correct - if you had done a complete restore from clean
>>media you would not have these problems you describe.
>>
>>It's time to actually do a wipe/reinstall, where you actually format
>>the drive and erase all data/files - this, provided you get a clean
>>set of install CD's, will give you a working machine that doesn't
>>contain malware.
>>
>>After that, before you connect to the internet, you need a working
>>firewall to allow you to connect without being compromised while
>>getting updates and patches....
>>
>>If you have the XP cd you could also try a repair/reinstall of XP, but
>>you could easily re-compromise your system.
>>
>>http://www.michaelstevenstech.com/XPrepairinstall.htm
>
> I agree with Leythos - time to cut your losses by completely wiping
> and reloading your system. I always recommend that when reinstalling
> your system due to a malware installation, that you go take extra step
> of nuking the entire disk. The reason being that malware can remain
> on a disk after a "format" if the format does not actually write to
> the sectors where the malware resides. Use "Boot 'n Nuke" and run

Back in the days of DOS, I'd agree. These days, your wasting time and
putting unnecesary wear/tear on the hard disk to do a sector wipe, when
it's not required. If the code has no execution point, it's useless; and
harmless. Partial malware left over on some sectors with nothing pointing
to them is dead in the water, ready and waiting to be overwritten.

And I still don't think the user should go for wiping the machine just
yet. XP Home and XP pro can both have group policy keys set, you just
don't get direct access via the controls in home, but it also does have
group keys.



--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[yomama]

On Aug 22, 8:48 am, Default User <defa...@user1.invalid> wrote:
> On Wed, 22 Aug 2007 10:58:53 -0400, Leythos <v...@nowhere.lan> wrote:
> >In article <mn.b1b57d781b5dbf29.70...@nonegone.com>, faux@none_gone.com
> >says...
> >> Arovax tells me spywad each week and points to user and machine:
> >> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
> >> complete restore of said machine, without change. I have been to
> >> KellysKorner, and a multitude of honorable forums trying to find the
> >> answer.
>
> >That can't be correct - if you had done a complete restore from clean
> >media you would not have these problems you describe.
>
> >It's time to actually do a wipe/reinstall, where you actually format the
> >drive and erase all data/files - this, provided you get a clean set of
> >install CD's, will give you a working machine that doesn't contain
> >malware.
>
> >After that, before you connect to the internet, you need a working
> >firewall to allow you to connect without being compromised while getting
> >updates and patches....
>
> >If you have the XP cd you could also try a repair/reinstall of XP, but
> >you could easily re-compromise your system.
>
> >http://www.michaelstevenstech.com/XPrepairinstall.htm
>
> I agree with Leythos - time to cut your losses by completely wiping and
> reloading your system. I always recommend that when reinstalling your
> system due to a malware installation, that you go take extra step of nuking
> the entire disk. The reason being that malware can remain on a disk after
> a "format" if the format does not actually write to the sectors where the
> malware resides. Use "Boot 'n Nuke" and run several passes to be sure the
> disk is cleanhttp://dban.sourceforge.net/.- Hide quoted text -
>
> - Show quoted text -

[Dustin Cook]

Leythos <void@nowhere.lan> wrote in news:MPG.2136116b31514121989854
@adfree.Usenet.com:

> In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
> says...
>> Arovax tells me spywad each week and points to user and machine:
>> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
>> complete restore of said machine, without change. I have been to
>> KellysKorner, and a multitude of honorable forums trying to find the
>> answer.
>
> That can't be correct - if you had done a complete restore from clean
> media you would not have these problems you describe.
>
> It's time to actually do a wipe/reinstall, where you actually format

I still, respectfully, disagree with this. I would prefer to explore the
policy key settings more thoroughly before deciding the machine needs to
be reloaded to restore a tab. It still seems, at this point in time, alot
of work when it could be fixed easier. It would be alot easier if the
person had vnc, or if the machine was here... lol. As it is, we have to
wait for the poster to reply and *hope* they did as we asked, properly.

It may not be worth the time over usenet to try and resolve this, but I'd
like to give it a few more tries before we hose the box, personal data,
personal settings, documents, mp3s and everything else the owner might
have present.




--
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
email: bughunter.dustin@gmail.com.removethis
web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml

[Leythos]

In article <Xns9994B24B0AD14HHI2948AJD832@69.28.186.121>,
spamfilterineffect.see.sig@nowhere.com says...
> Leythos <void@nowhere.lan> wrote in news:MPG.2136116b31514121989854
> @adfree.Usenet.com:
>
> > In article <mn.b1b57d781b5dbf29.70004@nonegone.com>, faux@none_gone.com
> > says...
> >> Arovax tells me spywad each week and points to user and machine:
> >> Software-Microsoft-Windows-Curr.Version-Policies........I have done a
> >> complete restore of said machine, without change. I have been to
> >> KellysKorner, and a multitude of honorable forums trying to find the
> >> answer.
> >
> > That can't be correct - if you had done a complete restore from clean
> > media you would not have these problems you describe.
> >
> > It's time to actually do a wipe/reinstall, where you actually format
>
> I still, respectfully, disagree with this. I would prefer to explore the
> policy key settings more thoroughly before deciding the machine needs to
> be reloaded to restore a tab. It still seems, at this point in time, alot
> of work when it could be fixed easier. It would be alot easier if the
> person had vnc, or if the machine was here... lol. As it is, we have to
> wait for the poster to reply and *hope* they did as we asked, properly.
>
> It may not be worth the time over usenet to try and resolve this, but I'd
> like to give it a few more tries before we hose the box, personal data,
> personal settings, documents, mp3s and everything else the owner might
> have present.

If the person were technical in nature I would agree to have "Fun" and
continue to play at finding the cause. It appears that the OP just wants
to "Use" the computer and could not care less about the issue once it's
fixed.

This has been going on for days, and who knows how long before posting
here - it's still a problem. The best solution, since we don't know if
the malware was actually removed completely, is to wipe and reinstall in
a clean environment, which would fix the problem and give the OP a clean
machine.

--
Leythos - spam999free@rrohio.com (remove 999 to email me)

Fight exposing kids to porn, complain about sites like PCBUTTS1.COM that
create filth and put it on the web for any kid to see: Just take a look
at some of the FILTH he's created and put on his website:
http://forums.speedguide.net/archive.../t-223485.html all exposed
to children (the link I've include does not directly display his filth).
You can find the same information by googling for 'PCBUTTS1' and
'exposed to kids'.