Cydoor

[raid517]

How the hell do I get rid of Cydoor? I've tried SSD, Adaware, Mcafeee Spyware removal tool, searching for and deleting registry keys and so on. But that feking thing just won't go. It came bundled wiith Xeem - so I wonder iif it is eXeem that is downloading and installing it every time I start it?

I'll be moving to exeem lite just as sooon as they release the 0.20 version..

GJ

[b0m8er]

Try using MS AntiSpyware and block cydoor in hosts file ;)

[irate]

Apparently, yes. Exeem reinstalls (?) Cydor every time it starts up. Exeem Lite has said they'll have a 0.20 version out anytime for about a week or so, so who knows. Could be today, could be next month.

[Top Qat]

Yeah nasty stuff CyDoor (and all other AdWare/SpyWare).

Should be re-classified as a virus and then the authors put to death!

Info here may help: http://www.pestpatrol.com/PestInfo/c/cydoor.asp

[bfoos]

Along with the hosts file blocking and spyware removal tools, next time you start exeem look in your system32 directory for a folder called "AdCache". Delete it and create a new text document called AdCache with no extention and make it read only. This will stop exeem from recreating the AdCache folder every time you launch it.

[cork1958]

Yes, it is exeem that is doing that. I wouldn't recommend getting exeemlite either as that definitely messes machines up too, especially Windows 9.x versions.

[insanekiwi]

try spybot search & destroy :yes:

[JorgeIvan]

spyware blaster

[S.MULLA]

sptsweeper, adware doesnt remove cydoor. however spy bot S&D and MS antispyware does remove it. :yes

[raid517]

Where can I download MS antispyware? I've tried the rest but they don't work. The AdCache thing seeemed to work well though - but I'm not sure if that means I still have cydoor installed?

GJ

[zedaxax]

Kazaa - puts cydoor on your pc

KazaaLite -puts a fake "Cydoor" on your system.

Could that be the answer?

[ev0|]

I wouldn't say Cydoor is particularly "nasty stuff".

MS Antispyware gets rid of it fine, unless you insist on continuing to use the crap they call "eXeem"

Now something like Hacker Defender, that is nasty.

Also, MS Antispyware is on www.microsoft.com (look)

[Tokar]

You cant remove the Cydoor out of eXeem. Its embedded just like its embedded in Kazaa (non-lite), WarezP2P, and the unregisterred versions of FlashGet.

The Cydoor in these programs does NOT install the commonly found dll's and registry entries with the standalone, virus like, Cydoor adware/spyware. The only thing it does is downloads ads first to some folder inside the program's main folder (or at least this is the case with Flashget c:\<flash get program location>\ads\cache434) and then it copies it all over to C:\Windows\System32\Adcache (or \WinNT for Windows 2000 users). The reason for this is such that if a ad removal program identifies the ads in the \Adcache folder and deletes all 100 or so of the ad files, after the program is done cleaning, it just quickly restores all the ads in milliseconds. And even if you delete the backup in the case of the Flashget ads, it only takes a matter of minutes for it to download new ads. The ads arent anything harmful...just a bunch of HTML files, SWF files, and some other web content. All of these ads are designed to display themselves in the program that has Cydoor built in, thats it, nothing more.

With Flashget, of course, registerring the program removes Cydoor from downloading anything (its still there, just not functional).

Kazaa lite of course has Cydoor removed, and so does eXeem lite.

WarezP2P doesn't have an alternative like WarezP2P-lite or such. There are two options here: first is to install the program Ares Galaxy, which is free, connects to the same network, and has no ad support. I personally don't mind the ads, and I personally dislike Ares galaxy for the fact that it doesn't show network stats where as WarezP2P does...Ares has no future plans of reimplementing it. Say what you think about me, but I like network stats, and its enough for me to use one program over another for it. The second option is KCeasy. KCeasy is an open source program that is built off the giFT network, and allows you to install plugins which allow connection to other networks (no ads either). The software comes bundled with the GNUtella 1/2 network plugin. The fasttrack network plugin is still functional, but development on it has since ceased. It used to be bundled with KCeasy until Sherman Networks told them not to bundle it. The Ares/Warez network is downloadable as a plugin, which works pretty good I must say. EDonkey plugin is still being worked on (or so i hope). I havent heard anything about a bit torrent plugin or MP2P plugin, but we will have to see in the future.

The problem with removing the Cydoor from these programs is that the company CLAIMS you lose some functionality.

Now of course thats not the case with FlashGet, as removing the ads means you registerred the program (or so we hope).

With Kazaa, there were no problems, just a bunch of threats telling people not to use Kazaa Lite, saying it wont work and such, and how Kazaa was much better. Who cares anyway, the network is going down the tubes anyway.

With WarezP2P, while I haven't heard of a way to actually REMOVE the cydoor, the developers say that if one was to remove the Cydoor (probably referring to the fact that if Warez wasn't to have ad supprt to fund the program), people wouldn't have a few nice features, most notably CD ripping/burning built into the program. While it sound logical, I have seen no proof.

With eXeem though, claims are being made that if you are to use eXeem lite, you won't be able to connect to the network. People are also saying that its been noted that the reason one needs the original eXeem is because eXeem contacts Cydoor for the ads which THEN will download the list of nodes. No Cydoor = no nodes = no connectivity. Firsthand, I can't refute or support this claim, as I can't get either eXeem or eXeem lite to connect. But people using both programs have been able to connect without any problems. If you visit the IRC channel for eXeem lite, they can provide you with a registry file which will import a big node list into your registry (probably the same one you would get if you were to use eXeem with Cydoor) if you are having connection issues with their lite software.

Edited January 28, 2005 by Tokar

[Slimy]

try spybot search & destroy :yes:

585368907[/snapback]

lol, some1 skipped a word in the first post

google shows you:

http://www.google.ca/search?hl=en&q=ms+antispyware&meta=

http://www.microsoft.com/athome/security/s...re/default.mspx