Xerus Posted April 8, 2004 Share Posted April 8, 2004 Theres some ad that appears on neowin every once and awhile, its a yellow box that says "You have spyware so download our fixing utility!" Now, I'm not an idiot. I didnt click on it thinking that it was telling the truth. But the thing is is takes up about the top third of my screen when it comes up. So I might of accidentally clicked it without even knowing it. I got some spyware from it called eZula, which has given me lycos search ****, bargain buddy, and about 10 other spyware programs. And I cant seem to get rid of it. Im running spybot, adaware, avg, and it keeps coming back after I get rid of it. Can anyone help? =/ Link to comment Share on other sites More sharing options...
hadiz Posted April 8, 2004 Share Posted April 8, 2004 First off, are you updating ad-aware each time before you scan? If so and still no luck... Run msconfig and go to the startup tab. Disable anything in there that looks like it might be related to the spyware (I.E. anything you don't recognize, but don't go too crazy). You could also try browsing to the path of the mystery files, which are listed in msconfig, and removing them. Or, just keep your fingers crossed that an ad-aware update in the near future will do the trick. Link to comment Share on other sites More sharing options...
Xerus Posted April 8, 2004 Author Share Posted April 8, 2004 I updated before I ran adaware. I didnt look at my msconfig yet though. I just ran spybot and adaware and it seems that everything was taken care of. But thats what I thought before and 10 hours later... strange shortcuts appearing on my desktop =/ Link to comment Share on other sites More sharing options...
john smith 1924 Veteran Posted April 8, 2004 Veteran Share Posted April 8, 2004 If you do get these, its only helpful posting if you also post the source code to the page that you viewed it. Otherwise we cant track it. Link to comment Share on other sites More sharing options...
Xerus Posted April 8, 2004 Author Share Posted April 8, 2004 I know, sorry. But I didnt even realize that I clicked on it. I got a popup from the spyware that leads to the same page that the ad did. If I see the ad again Ill be sure to get it. Link to comment Share on other sites More sharing options...
Xerus Posted April 8, 2004 Author Share Posted April 8, 2004 Just a quick update, since I cant edit the post above... I removed everything with adaware and spybot, or so I thought. I was sitting here watching a movie, and all of a sudden I notice my mouse has an hourglass and I wasnt even doing anything. I look down to the systray and what do I see? eZula installation 100%! Yay! The spyware reinstalled itself! This is driving me insane T_T Link to comment Share on other sites More sharing options...
.... Posted April 8, 2004 Share Posted April 8, 2004 I've seen this message, too. I'll keep my eye out for it. Link to comment Share on other sites More sharing options...
Frank Posted April 8, 2004 Share Posted April 8, 2004 I would un-install spybot and adaware, go to the websites and re-install them. I dunno why but I had a similar problem on a different machine, and after I did this, it took care of the problem. Make sure after you install them you update them, becuase they do not always include a fresh update file with every install. Also, if you open Spybot in advanced mode, click on the tools option, then the System Startup option, it lists everything that is started up when you boot into Windows. Post a Screeny of this window and we may be able to help you figure out what is causing the re-installation of your eZula. Link to comment Share on other sites More sharing options...
Xerus Posted April 8, 2004 Author Share Posted April 8, 2004 Okay, after many experiments this is what I've come up with. The source of the ad is www2.enigmasoftwaregroup.com/TMP.html as far as I can tell. I ran spybot and adaware again, and went through my msconfig and disabled everything I didnt need. I thought I had it, but it reinstalled AGAIN. I think I pinpointed where it was coming from though. I noticed that my windows media player 9 wasnt working at all. After I removed all the spyware (I lost count on what time this was) I double clicked a movie, and the reinstall began moments later. So, I removed it... again. I then reinstalled windows media player 9, and I havent had a reinstallation since... which was about 40 minutes ago from this post. I think I finally got it, but I dont know until I see that little friggin installation icon come up in the systray again T_T Link to comment Share on other sites More sharing options...
Toxikk Veteran Posted April 9, 2004 Veteran Share Posted April 9, 2004 my firewall and virus scan caught a trojan on object[1].hta the other day... think it was from here. didnt really get much info, as the file was deleted. Link to comment Share on other sites More sharing options...
Night.Hawk Posted April 9, 2004 Share Posted April 9, 2004 If you have XP, try closing all the running processess that are spyware and then scanning. Or run the scanner in safe mode. Then delete every back up for the spyware you have. It's risky so be careful. That's a guess it might not work. Try to monitor what starts at windows. Edit: Also try deleting all cookies and temp files. Maybe even your history. Link to comment Share on other sites More sharing options...
senalphsarci Posted April 9, 2004 Share Posted April 9, 2004 Xerus, I recomend you download a spyware scanner called "Bazooka" from here: http://www.kephyr.com/spywarescanner/ It's what I have used in the past to get rid of any spyware...it always works because it has manual intructions to delete the files and registry keys for any spyware it finds on your system and the instructions are easy to use...Tell me how it goes. Link to comment Share on other sites More sharing options...
SabaTime Posted April 9, 2004 Share Posted April 9, 2004 Ezula is spyware, my Ad-Aware caught it, it's located in your c:\program files\Ezula <-- Delete folder Link to comment Share on other sites More sharing options...
Xerus Posted April 9, 2004 Author Share Posted April 9, 2004 Ezula is spyware, my Ad-Aware caught it, it's located in your c:\program files\Ezula <-- Delete folder Oh how wonderful it would be if it was as simple as that ;D So far it hasnt returned, I think it was starting in windows media player, and since I reinstalled it I havent had any problems. Link to comment Share on other sites More sharing options...
bakerster Posted April 10, 2004 Share Posted April 10, 2004 I got the thing where the shortcuts appear on your desktop too. I basically ravaged my computer (deleted anything I didn't know) Cleared the startup, ran an uber amount of virus and crap programs. ect.. Link to comment Share on other sites More sharing options...
+chorpeac MVC Posted April 10, 2004 MVC Share Posted April 10, 2004 Theres some ad that appears on neowin every once and awhile, its a yellow box that says "You have spyware so download our fixing utility!" I saw this too. This appears on the top of neowin where the advertisements show. Link to comment Share on other sites More sharing options...
AQUaDeX Posted April 11, 2004 Share Posted April 11, 2004 Mmm that happened for me too, I actually think that AD used an exploit, it brought up a pop-up and installed something without me knowing it (no confirmation from IE either), but the good thing is AD-Aware removed that for me Link to comment Share on other sites More sharing options...
AQUaDeX Posted April 11, 2004 Share Posted April 11, 2004 my firewall and virus scan caught a trojan on object[1].hta the other day... think it was from here. didnt really get much info, as the file was deleted. mine too (McAfee VirusScan Enterprise, at work), but sadly it still slipped thru and installed something on my PC Edit: Is it just me or Neowin removed all ads except the front page Google one? Link to comment Share on other sites More sharing options...
Recommended Posts