Phil BK
Premium
join:2002-05-18
Miami, FL
| spywareno!
Somehow this got installed on my PC out of nowhere today. I didn't run an installer and I am running a virus/spyware check now. I did a bunch of searching for it on google and on the forums here and didn't find anything about this program. Anyone have any info about it?
--
If at first you don't succeed...bug them till you get what you want. |
|
nmboner
join:2005-04-18
Bloomington, IN | spywareno.com
If it's the same thing, it's a spyware removal tool. |
|
Phil BK
Premium
join:2002-05-18
Miami, FL
| Yes. But is it a legit spyware removal tool? There are tons of programs out there that say they are for that purpose and end up actually installing more spyware. I'm annoyed because I didn't actually install the program and I am the only person who can access this computer.
--
If at first you don't succeed...bug them till you get what you want. |
|
CajunTek
Insane Cajun
Premium,MVM
join:2003-08-08
Arlington, TX
 ·RoadRunner Cable
| Phil BK..
I wouldn't trust anything that got install on my PC without my knowledge.. Now It's not on any of the rogue lists.. It does seem to be on the selling lists of some of the other bogus sites though..
I'd get rid of it... if it were me..
--
Lost in Texas |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
| reply to Phil BK
How did you notice that this new prog was installed?
Better check that nothing else is running unannounced
»Security »I think my computer is infected or hijacked. What should I do?
Cudni |
|
redxii
too big to fail
Premium,Mod
join:2001-02-26
Texas | reply to CajunTek
I find it suspicious, because unlike the many legit names of anti-spwyare apps we hear around here, they offer no free version. Only a trial. |
|
Phil BK
Premium
join:2002-05-18
Miami, FL
| I knew it was installed because all of a sudden it was in my tray and asked me to run a scan of the system. Which seriously weirded me out.
I uninstalled it and then did a safe mode adaware and spybot S&D scan of the system. It found some cookies and registry entries but no exes or other executable files.
I'll run a hijack this when I get home and post it if anyone thinks it will help. I also have activex disabled in the browser and symantec AV corporate 9.0 running in the background. It didn't throw up a flag.
--
If at first you don't succeed...bug them till you get what you want. |
|
Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire | Did you install any other software, at that time, on which this could piggyback?
Cudni |
|
Phil BK
Premium
join:2002-05-18
Miami, FL | Nope, I was just working on an excel file, then it just popped up on my toolbar.
--
If at first you don't succeed...bug them till you get what you want. |
|
suzi
Premium
join:2004-05-01
| reply to Phil BK
Phil BK,
Eric Howes or I will be testing this one. It's very interesting you don't know where it came from. You might want to do a scan with a good anti-spyware app or 2, Ad-Aware, MS Antispyware, to make sure nothing else got on your machine that you don't know about.
Best,
Suzi
--
aka Suzi, Spyware Warrior |
|
EGeezer
Summertime -
Premium
join:2002-08-04
Country!
 ·Callcentric
·RoadRunner Cable
·AT&T CallVantage
2 edits | reply to Phil BK
The EULA is a boilerplate piece of crap - no privacy policy, no address (domain registered in Russia), reference to offices but no locations, etc etc.
edit - their affiliate program is wide open... Maybe that's where it came from.
It'll be interesting to see what Daphne and Eric come up with
(or "with which up they come"  ) |
|
skanxz
join:2005-05-21
uk
| reply to Phil BK
I've got the same problen. I got it a week ago. The exe: is in windows/Prefetch. Have uninstaled and removed all trace but it comes back on startup. I can't get into my Task Manager, it says it has be disabled by your administrator and today I have found I can't get into firewall settings (due to an unidentified problem).
I have had no virus or spyware for over a year but since this got on my computor that is no longer the case. |
|
eburger68
Premium,MVM
join:2001-04-28
| reply to Phil BK
Hi All:
SpywareNo has earned a spot on the Rogue/Suspect Anti-Spyware page. The scanner turned up a number of suspicious false positives almost immediately upon opening the program, leading me to wonder just what if anything had been scanned.
I've also noted in the SpywareNo entry that there are now several reports of stealth-installs, which is most worrisome.
In sum, this isn't a quality, reputable anti-spyware program by any stretch of the imagination.
Best,
Eric L. Howes |
|
skanxz
join:2005-05-21
uk
| reply to Phil BK
warning |
|
|
salzan
Experienced Optimist
Premium
join:2004-01-08
WA State | Even Windows has better grammar than that. |
|
C re
@dublin.ei
| This also happened to my machine last week. Have spent
5 days trying to remove. Be careful, lots of crap has since appeared on my program list and my machine is slowly but surely grinding to a halt. Have tried at least 10 very good adware and spy removers. Have even tried all these in safe mode but nothing works. Got into registry and deleted files but everything still reloads on start up. Any info gratefully received. Many thanks. |
|
garys_2k
join:2004-05-07
Farmington, MI | reply to Phil BK
Nobody has any idea where/how they picked this up? |
|
Anonymous
Premium
join:2004-06-01
IA
1 edit | reply to Phil BK
$14.95 - 1 Month
$34.95 - 6 Months
$59.95 - 12 Months
$99.95 - 36 Months
Every rogue spyware application is extremely expensive. |
|
MarkP7500
@bellsouth.net
| reply to skanxz
I picked up an xp box from a client today with this exact problem. The task manager is disabled, this windows error wall paper is up, and repeated safe-mode spyware scans with adaware and spybot haven't stopped it yet. Anybody know how to get this stuff off? |
|
suzi
Premium
join:2004-05-01
3 edits | reply to Phil BK
For those of you trying to get rid of this thing, follow the steps outlined here:
»Security »I think my computer is infected or hijacked. What should I do?
If anyone knows, or thinks they know, where they got this, I'd be most interested to know. Also, when you check for other junk, I'd like to know what else shows up, for example, on an Ad-Aware scan, or any anti-spyware scan for that matter.
Edit to add new info I found while doing a blog entry on this. Here's the whois.sc domain registration info.
»www.whois.sc/spywareno.com
Registrant:
Alexandre +7.0955935182
Petrov"
Leninsky str 31 19
Moscow,Moscow,RU 194923""
Domain Name:spywareno.com
Record last updated at 2005-04-09 09:42:35
Record created on 2004/7/23
Record expired on 2005/7/23
Domain servers in listed order:
ns1.dns-diy.com
ns2.dns-diy.com
»www.whois.sc/69.50.166.196
OrgName: Atrivo
OrgID: ATRIV
Address: 200 Paul Avenue
City: San Francisco
StateProv: CA
PostalCode: 94124
Country: US
NetRange: 69.50.160.0 - 69.50.191.255
CIDR: 69.50.160.0/19
NetName: ATRIVOTECHNOLOGIES
NetHandle: NET-69-50-160-0-1
Parent: NET-69-0-0-0-0
NetType: Direct Allocation
NameServer: MAIL.ATRIVO.COM
NameServer: PAVEL.ATRIVO.COM Does anyone else think this smells like it might be CoolWebSearch related?
SpywareNo! is also showing up in HijackThis logs around the net, which is a very bad sign.
Stirring the Google joice - blogged here:
»netrn.net/spywareblog/archives/2···ypareno/
Right now this thread is the top Google search result for SpywareNo. If you look at the links that Google brings up, many look like *very* sleazy sites. |
|
