Page 1 of 2

How to identify spyware...

PostPosted: Sat Apr 24, 2004 10:03 am
by Wing Nut
I came across this the other day and it's proving REAL handy!  When you do ctrl/alt/del and see all those processes, and you don't know what they are, just go here and most are defined for you.  VERY helpful...
:)


http://www.liutilities.com/products/win ... sslibrary/

Re: How to identify spyware...

PostPosted: Sat Apr 24, 2004 10:20 am
by Jared
Very interesting! :-)

Re: How to identify spyware...

PostPosted: Sat Apr 24, 2004 5:49 pm
by Politically Incorrect
Great site of information!
I was looking real close at the "spyware" ones and closely at the processes on my computer and at first I though I was loaded with spyware! LOOK REAL CLOSE! BEFORE KILLING!!!
Spyware processes are real similar to legitamite processes, differeing by a letter, usally switched around.
But very usefull site!!! I often wondered what some of that stuff was!
Thanks Pippin!!

Re: How to identify spyware...

PostPosted: Sat Apr 24, 2004 9:10 pm
by chomp_rock
I have a list of all of my normal Windows processes and the ones that don't run all of the time and I end any others that start (except Norton Antivirus and BlackIce Defender)

Re: How to identify spyware...

PostPosted: Mon Apr 26, 2004 6:49 pm
by bm_727
A good program to remove spyware is called Ad-Aware 6... It's available for free @ http://www.lavasoftusa.com

You might be surprised at how many spyware files r on ur computer... :P

Re: How to identify spyware...

PostPosted: Mon Apr 26, 2004 9:48 pm
by _526th_Fireman
For Spyware you really need to run BOTH Ad Aware and Spybot. I do use both as a tandem process. What one misses the other catches. There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine. Haven't tried it yet but will. Sounds promising and is free.

Link on write up is at Tech TV.
 
http://www.techtv.com/callforhelp/freef ... 27,00.html

There are also links on this page for AdAware and Spybot.

Re: How to identify spyware...

PostPosted: Tue Apr 27, 2004 1:05 am
by Delta_
I do the same as 526th_Fireman.  I use both, they are very useful.

Re: How to identify spyware...

PostPosted: Tue Apr 27, 2004 7:19 pm
by bm_727
There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine. Haven't tried it yet but will. Sounds promising and is free.

Cool thanks for the link i will d/l it now! Tell us how it works out on ur machine :)...

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 4:25 am
by Politically Incorrect
. There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine.


I have used this since last year, and it seems to work, hard to tell because it never tells you if something has been blocked??? But I do know everything it says it is blocking has never shown up on my machine.

I have used Spybot search& destroy along with it, but recently gave NoAdware a shot and NoAdware found and removed 26 pieces of spyware that Spybot "overlooked".
So now I run both, just to keep track if one is missing something, but since installing NoAdware haven't had a thing on my computer!

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 4:34 am
by Politically Incorrect
I might have to retract that last sentance :-X
Does anyone know what this is???

Image

I just started getting this pop-up at various times. What is it, where does it come from, is it spyware?
I have looked through the computer and can't find anything???
The instructions seem "fishy"?
I have run a virus scan, spyware scan etc, and find nothing.

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 7:21 am
by _526th_Fireman
Hi fretnstuff. I have never seen anything like that before, but it seems my memory tells me I saw at the Windows Update site that there is security problem with Messenger Service, buffer overrun as stated.

If you are concerned about it, go directly to the Windows update site and find the patch there.

http://v4.windowsupdate.microsoft.com/en/default.asp

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 2:20 pm
by bm_727
to fret-

I have heard of this before.  Actually, it has happened to me.  It does talk about the security issue with that program (messenger service), but i wouldn't click on it just to be safe, as that address isn't the site the patch is at...

Windows messenger service was originally designed to "allow system administrators on client-server networks to send out brief system-wide messages to everyone connected to the network." But, the reason it looks legitimate is because people have figured out ways to use messenger service for spam and thats why you're getting that message :-/

I got rid of them by turning on my MS firewall (included w/ windows) if u dont have uit turned on here's how.
Go to start/control panel/network & internet connection/ network connections and right click on ur connection.  go to 'properties' and check the first box that says "internet connection firewall" this has worked for me...

Also, theres a patch for it like fireman said called MS03-043

now, any questions? ;) ;D
hope this helps :-X

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 4:44 pm
by Politically Incorrect
Thanks guys for the info, but thing is i can't locate windows messanger anywhere? I never used it.
I went to the site for the patch and XP Home isn't listed??
Not to mention these patches are for a network, and my computer isn't on a network. It did come from dell with the network hook ups and so forth.
I figured I would just disable Windows Messenger like the M$ site said but I can't find it?!

Re: How to identify spyware...

PostPosted: Wed Apr 28, 2004 9:04 pm
by bm_727
fret-

go to the link I posted and look under "Affected Software:"
click on the d/l for "Microsoft Windows XP 64-bit Edition"

hope this helps ;)

Not to mention these patches are for a network, and my computer isn't on a network.

By this, I think the 'network' it's referring to is the internet...
Windows Messenger Service was originally developed for office or home networks, but spammers use it on the internet too...

PS- try to turn on your firewall also ;)...

Re: How to identify spyware...

PostPosted: Thu Apr 29, 2004 4:46 am
by Politically Incorrect
Forgot about the firewall, I have a different firewall I use and when I have the XP firewall enabled it messes up everything!
The pop up appears occasionally so I guess if the patch doesn't help I can live with it??? Not to mention since most problems like this have to do with something M$ I don't trust thier firewall the least bit ;D