Ad-Aware and Spyhunter

[ScotsLass]

I have a Win98 machine and executed ad-aware this morning and
it could not find any parasites.

I downloaded spyhunter and it found the following:

1) Hkey_Classes_root\acrolEHelper.acrolEHlpr.obj & obj1

2) Windows\system\npnsdad.exe

3) Windows\Favorites\Links\microsoft.url

My question is, how did ad-aware find nothing and Spyhunter find these
files. Has anyone else had this problem?

 

[SYAR2003]

Don't think ad-aware is best at spy's and trojans ,but very good at removing advertizing traces and treats .
It orginated from design with this in mind .
As for spy/trojan scanners approched from the other end of malware(spy's/virus/trojans ).
That's a possible explanation why they are not "in sync" when coming to removals .

 

[ITschoolGuy]

For whatever my humble opinion is worth...I have also found that SpyBot Search & Destroy (

http://download.com.com/3000-2144-10194058.html?tag=lst-0-1)will

detect components that AdAware will miss. I usually use them in conjunction with one another.

I've also found that neither one of them is particularly good at cleaning up after a browser hijack...which is what your results look like. You might also try CWShredder available at

http://www.wilderssecurity.com.

Chris

 

[carrr]

Also, when's the last time you updated Ad-Aware?
(Not that I'm sticking up for it...I've seen it fail too many times. IMHO, SpyBot is the better toy.

 

[SYAR2003]

Spy Sweeper is pretty good (has resident memory,cookie,hompage shield). And together with Spywareblaster :
SpywareBlaster provides protection against spyware ever installing and can also prevent spyware from running if it is already installed on your machine! SpywareBlaster can also protect against spyware/tracking cookies (this cookie protection function requires Internet Explorer 6 or above - the spyware protection mechanism even works on Windows machines without Internet Explorer).

-SpywareBlaster works by settings "kill bits" in the registry. These "kill bit" registry entries are set for the spyware ActiveX CLSIDs (unqiue IDs that identify an ActiveX control). When a kill bit is set for a CLSID, the ActiveX control that uses that CLSID cannot install itself via your browser, nor can it run if it already installed. Microsoft sometimes uses these kill bits for fixing Active-X security holes.

 

[ScotsLass]

We have a DOS program named QPRO in which spyhunter marked
q.exe as a parasite, this is a perfectly legitimate program, does
anyone know why it would do this?

 

[warhog73]

The paid version of Adaware is great.With it's Adwatch program, I've never had a Hijacker install itself on my systems. I read that some folks have issues with Adaware, but to my understanding, they are using the Freeware version, which I believe is basically toothless. Freeware to Freeware: Spybot S&D is hard to beat. Best wishes.


Don't forget those who serve and protect: Your Armed Forces personnel and Disabled Veterans (DAV).
"We sleep safely in our beds because rough men stand ready in the night to visit violence on those who would harm us."
George Orwell, author

 

[carrr]

Scotslass,

It's flagging your q.exe because it looks just like the q.exe associated with this keylogger:

http://www.pestpatrol.com/pest_info/ko/p/probot.htm