Catalog of spyware

[dparm]

http://www3.ca.com/securityadvisor/


Computer Associates basically has catalogged all the known spyware/malware and has lots of good info on it there. Also has virus information and other security risks. *bookmarked*

Adam, this may be a nice site for you to consult if you get something pesky that won't go away.

[dparm]

Here's a study I found of how Gator works and what it really does.

http://cyber.law.harvard.edu/people/edelman/ads/gator/

Interesting to read.

[loeb1]

Mmmmm...OSX.....No malware ever....

[dparm]

You're correct, but this thread isn't to discuss Mac vs. PC; it is meant as a resource for someone who encounters spyware on a machine and needs very specific removal instructions.

[loeb1]

Isn't the best way to just use the programs?

[ajj]

define what you mean by programs. Most Malware things ARE programs. Sadly most people just sit and click away without paying attention. Once they have one, they will probably soon have another. Gator is a BIG one. Using anti software is the one way i know of getting rid of them (someone please teach me another way). You can use 'spyware', "ad-aware personal 6", and even "sophos" as a way of getting rid of them. so if that's what you mean by 'programs' then you are correct.

[dparm]

Ad-Aware SE, Spybot, and HijackThis are the essential tools for malware removal.

MS Anti-Spyware isn't too bad since it functions more like anti-virus software and scans real-time.

[jmcgon]

Spybot and Ad-aware have deemed useless to me. Most people who bring their computers in have already run those programs. Research on items found by Hijackthis can indicate a hidden vx2/qoologic/nail/etc infection. Ever wonder why you keep getting popups even after you think its clean?? It's prolly one of those infections.

Your toolbox of software should not just be Spybot, Ad-ware, and Sophos. The new wave of infections are out of those programs' league. Each customer's computer is different and requires different tools. If you would like some help/info Andy I'd be glad to help you after my finals. :)

edit: Microsoft's Antispyware is still in beta, therefore I do not recommend it.

[dparm]

We have a few other tools, like CWShredder, the VX2 plugin for Ad-Aware, a rootkit revealer, DLLcompare, Process Analyzer, and KillBox.

BTW running Ad-Aware/Spybot scans while not in Safe Mode is worthless. At the DMRC, we first boot to the OSCR disc and let it clean viruses out. Next comes a boot into Safe Mode, a scan by Ad-Aware and Spybot, then some manual cleanup with HijackThis. Works like a charm.

[jmcgon]

This topic has seemed to drift a bit. I have different views than you on how to help a customer fix their computer. However, I am not going to start a thread war over it. ;)

Moving back into this topic... Another great catalogue site is http://www.doxdesk.com/

[dparm]

Awesome link, James. That parasite JavaScript is pretty nifty!

[jmcgon]

Forgot the list of rogue anti-spyware programs people should not install... http://www.spywarewarrior.com/rogue_anti-spyware.htm#products

[Unregistered]

Another list to look before installing the program:
list of rogues (http://www.2-spyware.com/corrupt-anti-spyware)

Forgot the list of rogue anti-spyware programs people should not install...

[Unregistered]

I've used a website called Lunarsoft.net to fix a lot of issues, they're very helpful, fast and accurate there!