spyware issues.

Status
Not open for further replies.

amazon_sephy

Posts: 78   +0
Hi,

Seems ive run into a nice spyware problem. This v2x.betterinternet thing wont go away and is multiplying on my computer like crazy. I now get pop ups even with a popup blocker. Ive used both adaware 6 with all updates, and spybot search and destroy 1.2 with updates. and both delete it. but with a quick check again tehre back already!! both reg keys and new program are being installed. Anyone know of anything i can do or is a format in order? Thx.
 
Look for a setting to empty the Pagefile when you shut down.
If you can't find it, go to System/Properties/Advanced, make a note of the current virtual settings and then change them to 0.
Ignore any warnings. Reboot, set them back to what they were.

Also, in C:\"windows or winnt"\system32\drivers\etc is a file "hosts". Remove the read-only attribute, edit with Notepad, add a new entry "127.0.0.1 v2x.betterinternet" without the quotes. If there are more variants of that web-name, enter them all in the same way. Save the file, put the Readonly back.

Check for entries in Start/Programs/Startup that should not be there. Rightclick/delete them
Run MSConfig and look under Start for rogue entries.

HTH
 
I'd run msconfig and look through the startup section and remove ANYTHING that shouldn't be there, that way you know for sure the stupid thing isn't getting unloaded. I also suggest finding a virus scanner as well as spybot s&D.. Spybot has always worked for me.
 
I agree witn realblackstuff, and would turn of system restore to clear the pagefile, the spam file may be in your saved restore file and just keeps coming back. You can re-enable sys restore after a reboot.
 
Ahhh... I see what ya'll were saying now. And I also note you say you already used S&D. *smacks forehead*

If running a virus scanner like AVG or TrendMicro's housecall and then running Spybot doesn't cure it, repeating those steps followed by the sys restore steps they mention will likely do a good number. I might leave the page file off for an extra reboot to help be sure windows isn't acting on you.

Also, I vaguely recall there was a removal tool made especially for BetterInternet... one that gets updated like everyweek with the newest variants and all. I'll google for a while, let you know if I find it.
 
sry about the lag time, i tried that spy sweeper, and removed stuff, i believe the v2x is gone, but sometimes it wont show up in the searchers, then a few days later it will show up, while that "may" be gone, i still get IE popups, and my default page is constantly be changed on me. The latest thing seems to be this websearch toolbar, which autoinstalls software into the program files folder, and something that is in memory called WToolsA.exe seems to want access with IE for some reason, but i dont recall that be a legit program, and i cannot shut that down from the task manager. another suspicious thing is the WSup.exe. anyone know what these are?
 
ah, good stuff, gonna try it, looks like im gonna have to set teh safe mode check box in msconfig, as i remember trying to use teh f8 method and the comp froze trying to go into safe mode, and yes i did wait long enough for it to show, so hopefully that wont be an issue, let you know how it worked out.
 
well, all the stuff has been cleared out, after running all three spyware checkers i detect nothing remaining. however i still do get an ie popup even when im not using ie.... anyone know whats up with that?
 
Status
Not open for further replies.
Back