Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
10/15/2002 11:29:40 AM EDT
my computer is acting funny and someone suggested lavasoft spyware scan. well i scanned and it come up with 4 files and i have no idea what they are. here is the results.


Started registry scan
======================
Cydoor key:HKEY_USERS\.default\software\cydoorCydoor key:HKEY_CURRENT_USER\software\cydoorCydoor key:HKEY_LOCAL_MACHINE\software\cydoorAlexa key:HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}

Started extended registry scan
===============================


Registry scan result:
Suspicious keys found : 4


Started folder scan
====================
Warning, no disk in drive (A)

Folder scan result:
Folders processed:923
Suspicious folders found:0


Started file scan
==================
Cydoor file:C:\WINDOWS\TEMP\cd_clint.dll
(Ignored)
Other file:C:\WINDOWS\Cookies\gateway [email protected][1].txt
Doubleclick file:C:\WINDOWS\Cookies\gateway user@doubleclick[1].txt
(Ignored)
Other file:C:\WINDOWS\Cookies\gateway user@fastclick[2].txt
Other file:C:\WINDOWS\Cookies\gateway user@valueclick[1].txt
(Ignored)

File scan result:
Suspicious files found:5



Scanning finished
==================
Suspicious modules found:0
Suspicious keys found : 4
Suspicious folders found:0
Suspicious files found:5
=========================
Components ignored:3
Total components found:6

10/15/2002 2:09:42 PM EDT
[#1]
btt
10/15/2002 2:17:01 PM EDT
[#2]
Acting funny?  Can you expand on that?

Now that you've scanned your system with Ad-aware, the next step is to click the DELETE button so Ad-aware will ditch the spyware.

USPC40


[img]www.ar15.com/members/albums/USPC40/line.gif[/img]
[url=www.nra.org][b][red]NRA[/red][/url] [url=www.nra.org][blue]Life Member[/blue][/url]
[url=www.gunowners.org][b][red]GOA[/red] [/url] [url=www.gunowners.org][blue]Life Member[/blue][/url]
[url=www.saf.org][red]SAF[/red][/url] [url=www.saf.org][blue]Supporter[/blue][/url]
[url=sas-aim.org][red]SAS[/red][/url] [url=sas-aim.org][blue]Supporter[/blue][/b][/url]

[img]www.ar15.com/members/albums/USPC40/alabamaflag.gif[/img]
10/15/2002 2:29:55 PM EDT
[#3]
have ad aware remove them
10/15/2002 2:35:21 PM EDT
[#4]
use kazaa/morpheus/grokster or any other clones of those programs?
that cydoor thing is needed by those programs, but it can be gotten around by using a fake file. I'm looking for the instructions now, as I never bookmarked them
10/15/2002 2:41:56 PM EDT
[#5]
[url]http://www.project-insomnia.com/kazaa.html[/url]

has instructions for removing the spyware without disabling the file sharing

hmm, it's been updated and doesn't have the link to the fake file to replace that dll with

think this one has it
[url]http://www.geocities.com/Pentagon/Quarters/5077/new/cleankazaa.html#preparing[/url]
10/15/2002 3:08:32 PM EDT
[#6]
i dont know anything about this spyware stuff but i guess that cydoor must be spyware? and i used to use kazaa but i havent lately.
my computer will sometimes slow to a crawl online and get to the point where it wont even load pages all the way. none of my neighbors have the problem with their service so i figured it must be my computer
10/16/2002 2:16:34 PM EDT
[#7]
Quoted:
i dont know anything about this spyware stuff but i guess that cydoor must be spyware?
View Quote

Cydoor is spyware and is loaded on your system when you install Kazaa.  If you haven't already, get rid of it with Ad-aware.

USPC40


[img]www.ar15.com/members/albums/USPC40/line.gif[/img]
[url=www.nra.org][b][red]NRA[/red][/url] [url=www.nra.org][blue]Life Member[/blue][/url]
[url=www.gunowners.org][b][red]GOA[/red] [/url] [url=www.gunowners.org][blue]Life Member[/blue][/url]
[url=www.saf.org][red]SAF[/red][/url] [url=www.saf.org][blue]Supporter[/blue][/url]
[url=sas-aim.org][red]SAS[/red][/url] [url=sas-aim.org][blue]Supporter[/blue][/b][/url]

[img]www.ar15.com/members/albums/USPC40/alabamaflag.gif[/img]
10/16/2002 2:26:40 PM EDT
[#8]
Lavasofts Ad-aware seems to be a good program.  

Sometimes though, even with ad-aware, spyware is a real pain in the ass to get rid of.

Had something called 'gator'.  It's some marketing ad/spy software but it kept reinstalling itself into my registry after I deleted the directory, removed them from the registry etc.  Sneaky bastards.  Took awhile to figure out but it's gone for good.  

Made up an alias hotmail account and bitched them out.  I figure with scum like that, you use your real addy and they'll sell it anyway.  I'm sure they don't care, but it felt good bitching in their general direction.  [:D]

10/16/2002 3:13:18 PM EDT
[#9]
its gone, we'll see if it helps
thanks