[shawn101]

Every time I scan I com with ad-aware, the result contains many hkey related tracker. How can I remove them cmpletely?

I've follow some advice posted about the dso exploit when scanning with spybot. The method is deleting the 1004 file and create a new dzword 1004 and reseting the hex value to 3. The dso exploit doesn't appear again when I scan my come with the spybot. How ever is this really save for privacy when it doesn't appear anymore?

[fredg]

Hi,
First, you don't create a new keyword for the 1004 value.
You delete the 1004 value, then forget it.

Here are steps in running scans for spyware, and some good programs to use:

If you think you already have Spyware/Advertising Ware in your computer, run these as follows:

http://www.security-related.com/download2.htm
Download: SpyBot Search & Destroy; 1.3

AdAware at:
http://www.lavasoftusa.com
Download: AdAware_SE

CWShredder at:
http://www.intermute.com/products/cwshredder.html
(CWShredder is intended only for removal of CoolWebSearch files; placed as spyware on the harddrive). It is not a "stand alone" scan, but needs to be run. Download the free version by clicking on "Download stand alone version of CW Shredder".

All 3 of the above programs run better and much faster when run in SafeMode.

To get into SafeMode:
Re-boot the computer, and immediately after starting up, Press and hold down, F8, at top of keypad.
When the options show on the screen, use the up and down arrow keys on the keyboard to select
"Safe Mode".
Press Enter

It's best to run the AdAware scan first; 3 times; then re-boot.
Then, run the AdAware scan again 3 times; then run the SpyBot. Then, run CWShredder.
Re- Boot.
Reason for running so many times:
Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
Running multiple times deletes most of it the first
time.

If you wish to have a great program, after you clean out Spyware/Advertising Ware:
SpyWare Blaster 3.2
Great, free, program that STOPS spyware, trojans, home page hijacks, etc, BEFORE they get into your computer. Check it out at CNET at link:

http://www.download.com/SpywareBlast...ml?tag=lst-0-2

If you delete the 1004 value, you will have privacy. There will be no more sending and receiving advertising stuff from your computer.
If you run the above, the AdAware and SpyBot, combined with SpyWare Blaster will get all this spyware out of your registry, automatically.
Best wishes,
fredg

[ScottGem]

Shawn,
If you have Win XP, you might want to check out Microsoft's new free anti-spyware utility. One of its advantages is that's it real time protection like an anti-virus. It blocks the malware from being installed.

You can find it here:
http://www.microsoft.com/athome/secu...e/default.mspx

[shawn101]

The hkey users... only appear in the ad aware ,not in the spybot, does it means that it is still inside my com? I can downoad the cwshredder.html, the page contain no data, is there any alternate way of downloading it?