[Smokey]

I have always used Ad-aware, but on this website, admin and tazz both have links to Spybot. I have the feeling that they like Spybot better. I have seen problems on this website that couldn't be fixed with Spybot, but they could be fixed Ad-aware. I'm confused, which one is better?

Edited by nathanhuth, 20 January 2004 - 09:02 PM.

[Advertisements]

Adaware went through a time last year when it wasn't being updated regularly, because of this many people started recommending Spybot. Spybot has a great devlopment team, is updated often and continues to improve. There's also the profit motive. Spybot remains totally free (with donations accepted), while Adaware has gone more commercial, and finding the free software on their site has become more difficult.

Spyware and spyware removal tools are in an arms race--the spyware programs change and are introduced so often that neither program has proven it will eliminate them all. That's also why it's very important to check for updates before scanning. The best answer is to use BOTH Spybot and Adaware. However, realizing many users are on dial up, we often only recommend Spybot.

Which brings us to the last tool in the spyware toolbox--HiJack This. It's very powerful and will even detect previously unknown spyware (if you know what you're looking for). HiJack This logs are not easily interpeted, because of this most users simply create a log, and have it reviewed by an expert. If you want to learn more about reading HiJack This logs, I can supply you with some links.

I've also learned to like Spyware Blaster. It's a nice tool for keeping spyware off your system. See the "Spyware Tools" link in my signature.

[admin]

Adaware went through a time last year when it wasn't being updated regularly, because of this many people started recommending Spybot. Spybot has a great devlopment team, is updated often and continues to improve. There's also the profit motive. Spybot remains totally free (with donations accepted), while Adaware has gone more commercial, and finding the free software on their site has become more difficult.

Spyware and spyware removal tools are in an arms race--the spyware programs change and are introduced so often that neither program has proven it will eliminate them all. That's also why it's very important to check for updates before scanning. The best answer is to use BOTH Spybot and Adaware. However, realizing many users are on dial up, we often only recommend Spybot.

Which brings us to the last tool in the spyware toolbox--HiJack This. It's very powerful and will even detect previously unknown spyware (if you know what you're looking for). HiJack This logs are not easily interpeted, because of this most users simply create a log, and have it reviewed by an expert. If you want to learn more about reading HiJack This logs, I can supply you with some links.

I've also learned to like Spyware Blaster. It's a nice tool for keeping spyware off your system. See the "Spyware Tools" link in my signature.

[Smokey]

Thanks for the recommendations. I take no chances when it comes to spyware. I only download programs that I know are adware-free. I am not running any anti-adware programs on my main system, I just don't take any chances. I do have Ad-Aware running on my secondary system since I take more chances with downloading programs on it. Can you just make sure my main system is clean by reviewing my HiJackThis log, thanks!

Logfile of HijackThis v1.97.7
Scan saved at 5:49:39 PM, on 1/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Nathan\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dellnet.my.msn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dellnet.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
O2 - BHO: (no name) - {0549E6CB-9985-42F6-8FD6-4EC017E6AAE1} - C:\Program Files\Internet Explorer\PopThis.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {656EC4B7-072B-4698-B504-2A414C1F0037} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [msci] C:\DOCUME~1\Nathan\LOCALS~1\Temp\200418194048_mcinfo.exe /insfin
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra 'Tools' menuitem: PopThis! Options... (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell....iler/SysPro.CAB
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com...ex/qtplugin.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macr...director/sw.cab
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop...cpConnCheck.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://bin.mcafee.co...76/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150...ip/RdxIE601.cab
O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://getdway.com/d.../dpcsysinfo.cab
O16 - DPF: {8E28B3A9-FE83-45D1-B657-D5426B81A121} (CustomerCtrl Class) - http://cs5b.instants...erxsigned35.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://ftp.us.dell.c...es/PROFILER.CAB
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.c...ient/isetup.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildt...ler/install.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://bin.mcafee.co...,16/mcgdmgr.cab
O16 - DPF: {DE22A7AB-A739-4C58-AD52-21F9CD6306B7} (CTAdjust Class) - http://download.micr...US/clearadj.CAB
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by8fd.bay8.ho...ex/HMAtchmt.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F31A0C6-EF05-4EAD-9F15-F6C8DEFB3BFE}: NameServer = 64.63.219.6 64.63.216.6
O17 - HKLM\System\CS1\Services\Tcpip\..\{5F31A0C6-EF05-4EAD-9F15-F6C8DEFB3BFE}: NameServer = 64.63.219.6 64.63.216.6

I am worried about the things in bold. Can you give me some advice?

Edited by nathanhuth, 21 January 2004 - 05:54 PM.

[admin]

Looks good. I don't see anything to be concerned about. If you want to do a little housecleaning fix these:

O16 - DPF: {76D90D08-EAB7-46D8-BF99-87445BF59E72} (SystemInfo Class) - http://getdway.com/d.../dpcsysinfo.cab
Do you have satellite Internet? If not, fix it.
O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.c...ient/isetup.cab
The "New" Napster client
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildt...ler/install.cab
Can be used to update spyware, but also installed by some (mostly shareware) programs to auto update. I'd remove.

[Smokey]

How do I remove those? Thanks.

[admin]

Restart Hijack This, peform a scan, and put a check mark next to the recommended items, and select fix.