How to identify spyware...

[Wing Nut]

I came across this the other day and it's proving REAL handy!  When you do ctrl/alt/del and see all those processes, and you don't know what they are, just go here and most are defined for you.  VERY helpful...



http://www.liutilities.com/products/win ... sslibrary/

[Jared]

Very interesting! :-)

[Politically Incorrect]

Great site of information!
I was looking real close at the "spyware" ones and closely at the processes on my computer and at first I though I was loaded with spyware! LOOK REAL CLOSE! BEFORE KILLING!!!
Spyware processes are real similar to legitamite processes, differeing by a letter, usally switched around.
But very usefull site!!! I often wondered what some of that stuff was!
Thanks Pippin!!

[chomp_rock]

I have a list of all of my normal Windows processes and the ones that don't run all of the time and I end any others that start (except Norton Antivirus and BlackIce Defender)

[bm_727]

A good program to remove spyware is called Ad-Aware 6... It's available for free @ http://www.lavasoftusa.com

You might be surprised at how many spyware files r on ur computer...

[_526th_Fireman]

For Spyware you really need to run BOTH Ad Aware and Spybot. I do use both as a tandem process. What one misses the other catches. There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine. Haven't tried it yet but will. Sounds promising and is free.

Link on write up is at Tech TV.
 
http://www.techtv.com/callforhelp/freef ... 27,00.html

There are also links on this page for AdAware and Spybot.

[Delta_]

I do the same as 526th_Fireman.  I use both, they are very useful.

[bm_727]

There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine. Haven't tried it yet but will. Sounds promising and is free.

Cool thanks for the link i will d/l it now! Tell us how it works out on ur machine ...

[Politically Incorrect]

. There is a program I am looking at called SpywareBlaster that catches it before it gets into your machine.

I have used this since last year, and it seems to work, hard to tell because it never tells you if something has been blocked??? But I do know everything it says it is blocking has never shown up on my machine.

I have used Spybot search& destroy along with it, but recently gave NoAdware a shot and NoAdware found and removed 26 pieces of spyware that Spybot "overlooked".
So now I run both, just to keep track if one is missing something, but since installing NoAdware haven't had a thing on my computer!

[Politically Incorrect]

I might have to retract that last sentance
Does anyone know what this is???



I just started getting this pop-up at various times. What is it, where does it come from, is it spyware?
I have looked through the computer and can't find anything???
The instructions seem "fishy"?
I have run a virus scan, spyware scan etc, and find nothing.

[_526th_Fireman]

Hi fretnstuff. I have never seen anything like that before, but it seems my memory tells me I saw at the Windows Update site that there is security problem with Messenger Service, buffer overrun as stated.

If you are concerned about it, go directly to the Windows update site and find the patch there.

http://v4.windowsupdate.microsoft.com/en/default.asp

[bm_727]

to fret-

I have heard of this before.  Actually, it has happened to me.  It does talk about the security issue with that program (messenger service), but i wouldn't click on it just to be safe, as that address isn't the site the patch is at...

Windows messenger service was originally designed to "allow system administrators on client-server networks to send out brief system-wide messages to everyone connected to the network." But, the reason it looks legitimate is because people have figured out ways to use messenger service for spam and thats why you're getting that message :-/

I got rid of them by turning on my MS firewall (included w/ windows) if u dont have uit turned on here's how.
Go to start/control panel/network & internet connection/ network connections and right click on ur connection.  go to 'properties' and check the first box that says "internet connection firewall" this has worked for me...

Also, theres a patch for it like fireman said called MS03-043

now, any questions?
hope this helps

[Politically Incorrect]

Thanks guys for the info, but thing is i can't locate windows messanger anywhere? I never used it.
I went to the site for the patch and XP Home isn't listed??
Not to mention these patches are for a network, and my computer isn't on a network. It did come from dell with the network hook ups and so forth.
I figured I would just disable Windows Messenger like the M$ site said but I can't find it?!

[bm_727]

fret-

go to the link I posted and look under "Affected Software:"
click on the d/l for "Microsoft Windows XP 64-bit Edition"

hope this helps

Not to mention these patches are for a network, and my computer isn't on a network.

By this, I think the 'network' it's referring to is the internet...
Windows Messenger Service was originally developed for office or home networks, but spammers use it on the internet too...

PS- try to turn on your firewall also ...

[Politically Incorrect]

Forgot about the firewall, I have a different firewall I use and when I have the XP firewall enabled it messes up everything!
The pop up appears occasionally so I guess if the patch doesn't help I can live with it??? Not to mention since most problems like this have to do with something M$ I don't trust thier firewall the least bit