Computer Forums

Member Login

Remember Me? Sign Up! | Forgot Password
 
Slogan
 
Closed Thread
Old 01-08-2008, 08:40 PM   #1 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default replacing spyware files

i dont have enough knowledge about spyware and files that it downloads on your computer but most of them are either in user/temp directory or windows32

i had a few spyware programs and found the .exe files.

does anyone know if it would help instead of deleting the exe files to replace them with empty 0 byte of same name and enable "read only" function.
or does the spyware overwrite the read only function?
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-08-2008, 08:56 PM   #2 (permalink)
Osiris's Avatar
 

Join Date: Jan 2005

Location: Kentucky

Posts: 32,187

Osiris is a jewel in the roughOsiris is a jewel in the roughOsiris is a jewel in the rough

Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris Send a message via Skype™ to Osiris
Default Re: replacing spyware files

You would probably get a access denied error message because that file is in use. Why would you want to do this anyways?
__________________
Osiris is online now  
Old 01-08-2008, 09:02 PM   #3 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

Quote:
Originally Posted by Osiris View Post
You would probably get a access denied error message because that file is in use. Why would you want to do this anyways?
Keep the spyware but make it not work
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
Old 01-13-2008, 12:14 AM   #4 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

ye that was kinda my idea if the spyware sees the file present it would assume that its already there. but i donno if it would still overwrite itsself or not

i had few exe files in my win32 directory replaced with write protected empty .exe files and so far none of them changed

can anyone help me out? confirm? disagree? anything..
i know theres people that have more knowledge about it on this board.
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-13-2008, 12:17 AM   #5 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

Why not just remove the spyware than keep it?
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
Old 01-14-2008, 05:16 AM   #6 (permalink)
Mak213's Avatar
 

Join Date: Sep 2004

Location: C:\Windows\System32

Posts: 25,689

Mak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to all

Default Re: replacing spyware files

Remove it and take steps so that you dont get it again. That is the best course of action. Rather than just leave it alone and risk the changes it becomes active again and doesn something you will regret later.
__________________
R.I.P. Danny L. Trotter
14 Nov 1945 - 4 Sept 2009
Images created by CarnageX | Decaptured...Listen! | Visit Baezware!! | You've been Mak'd! | 儿做好
I do not accept support questions via EMail, PM, IM or my Spaces page! .:|:. This is what happens when an unstoppable force meets an immovable object.
Thanks to all the guys on the staff for your support in my time of need. Hefe you are my personal Hero for your contribution.



<<<< If I help you, or you just like what I said, rep me
Mak213 is online now  
Old 01-21-2008, 05:45 PM   #7 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

lol i dont think i explained it clearly
i do remove it from registry and all the files except
the exe files that show up in task manages
the ones that are actually running
i open it in notepad and erase all the contents of the file and save it as a read only exe file
but i dont know if most spyware has the ability to overwrite files that are write protected by windows.
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-21-2008, 05:47 PM   #8 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

Quote:
Originally Posted by raverx3m View Post
lol i dont think i explained it clearly
i do remove it from registry and all the files except
the exe files that show up in task manages
the ones that are actually running
i open it in notepad and erase all the contents of the file and save it as a read only exe file
but i dont know if most spyware has the ability to overwrite files that are write protected by windows.
You have the wrong idea of removing spyware... Also, you can't open an exe file with Notepad to change it...
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
Old 01-21-2008, 09:59 PM   #9 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

why not? i did it many times
open notepad and drag the exe file there and empty the contents
click save as and save it with .exe extension
so whats the right way to remove spyware?
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-21-2008, 10:30 PM   #10 (permalink)
Osiris's Avatar
 

Join Date: Jan 2005

Location: Kentucky

Posts: 32,187

Osiris is a jewel in the roughOsiris is a jewel in the roughOsiris is a jewel in the rough

Send a message via ICQ to Osiris Send a message via AIM to Osiris Send a message via MSN to Osiris Send a message via Yahoo to Osiris Send a message via Skype™ to Osiris
Default Re: replacing spyware files

going thru my guide and posting a hijackthis log
__________________
Osiris is online now  
 
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
HijackThis logs for Security Team members only Trotter Virus - Spyware Protection / Detection 34 01-25-2008 01:13 PM
Running a lil slow Max Power HijackThis Logs (finished) 4 01-02-2008 06:44 PM
New Log enigm@tic HijackThis Logs (finished) 4 12-13-2007 08:45 PM
friends log Static_11 HijackThis Logs (finished) 11 11-25-2007 10:27 PM