Computer Forums

Member Login

Remember Me? Sign Up! | Forgot Password
 
Slogan
 
Closed Thread
Old 01-22-2008, 08:28 AM   #11 (permalink)
Mak213's Avatar
 

Join Date: Sep 2004

Location: C:\Windows\System32

Posts: 25,662

Mak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to all

Default Re: replacing spyware files

Quote:
Originally Posted by raverx3m View Post
why not? i did it many times
open notepad and drag the exe file there and empty the contents
click save as and save it with .exe extension
so whats the right way to remove spyware?
Opening notepad and dragging and dropping a .exe file in there will produce this:



Just a bunch of jibberish. If you can read that and do anything with it then you are somethign special. You would have to extract the .exe to a folder first and then check the files. Plus you cant jsut save stuff as a .exe and have it work as a executable. You have to compile the data into a working executable. I have made a few .exe's before and it is no where as easy as save as .exe for it to work.

Osiris is right. Go thru his guide and that is the correct way to get rid of spy ware. Plus your thoughts about spy ware overwriting itself. Way off. Spy ware is constantly changing. that is the only way it can survive. It it never changed it would be caught by all the spy ware filters out there. So you wouldn't have to worry about it being over-written on your hard drive as a new file would appear.
__________________
R.I.P. Danny L. Trotter
14 Nov 1945 - 4 Sept 2009
Images created by CarnageX | Decaptured...Listen! | Visit Baezware!! | You've been Mak'd! | 儿做好
I do not accept support questions via EMail, PM, IM or my Spaces page! .:|:. This is what happens when an unstoppable force meets an immovable object.
Thanks to all the guys on the staff for your support in my time of need. Hefe you are my personal Hero for your contribution.



<<<< If I help you, or you just like what I said, rep me
Mak213 is online now  
Old 01-22-2008, 08:32 PM   #12 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

anyway that is not what i meant you guys are thinkin too advanced
a simple file with 0 bytes and .exe extension is that i mean
i dont intend it to work as an application i only need it to take a spot(name) of the spyware exacutable file

for example lsasss.exe
in windows32 directory was an executable file
which i opened with notepad and deleted all data completely so its blank
then saved it as lsasss.exe(read only) instead of plain txt
in hopes that when the real spyware tries to write into that directory there will be a file with same name and write protected.
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-22-2008, 08:36 PM   #13 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

Quote:
Originally Posted by raverx3m View Post
anyway that is not what i meant you guys are thinkin too advanced
a simple file with 0 bytes and .exe extension is that i mean
i dont intend it to work as an application i only need it to take a spot(name) of the spyware exacutable file

for example lsasss.exe
in windows32 directory was an executable file
which i opened with notepad and deleted all data completely so its blank
then saved it as lsasss.exe(read only) instead of plain txt
in hopes that when the real spyware tries to write into that directory there will be a file with same name and write protected.
The spyware is STILL THERE, your computer is STILL INFECTED.
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
Old 01-22-2008, 08:50 PM   #14 (permalink)
Redmo0n's Avatar
 
Techalicious

Join Date: Aug 2007

Location: Perth, Australia

Posts: 1,573

Redmo0n is on a distinguished road

Send a message via MSN to Redmo0n
Default Re: replacing spyware files

I want to throw some rubbish out

I rip it up into tiny pieces and scribble on it.

Its still there, please help?
__________________
Back to stay?
Redmo0n is offline  
Old 01-23-2008, 05:53 PM   #15 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

omg am i that bad at explaining? or people dont really read and try to understand the question before answering

no data inside the .exe file= file is not an .exe file but a .TXT file with .exe extention in place of real spyware executable.

does am i the only one done that?
or you guys just ****in with me?
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-23-2008, 05:59 PM   #16 (permalink)
 
Super Techie

Join Date: Sep 2005

Posts: 332

raverx3m is on a distinguished road

Send a message via AIM to raverx3m
Default Re: replacing spyware files

step by step
1 find a small exe file that is not needed
2 open notepad and drag the file into it, it will show bunch of jibberish
3 select all and press delete button result is blank
4 from file menu click save as and save it with .exe extension
5 go to properties and check "read only"

i did this to last 3 spyware files i got ( i used to get them pretty often)
and havent got any of those yet since the files were there.
__________________
case: ANTEC TX640B 400w smart power-------------mobo: AOpen i915Pa-E Socket T
cpu: P4 630 3.0ghz Prescott 800MHz---------ram: OCZ EL 512x2MB DDR 400 (2.3.2.5)
vga: eVGA Geforce 6600GT 128MB GDDR3 PCIe
dvdr: LG GSA-4167B----------HD: WD 39GB SATA 1000rpm sysdrive
maxtor 250gb SATA 7200rpm
raverx3m is offline  
Old 01-23-2008, 06:23 PM   #17 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

I give up.
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
Old 01-23-2008, 07:29 PM   #18 (permalink)
Mak213's Avatar
 

Join Date: Sep 2004

Location: C:\Windows\System32

Posts: 25,662

Mak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to allMak213 is a name known to all

Default Re: replacing spyware files

Quote:
Originally Posted by Makaveli213 View Post
Osiris is right. Go thru his guide and that is the correct way to get rid of spy ware. Plus your thoughts about spy ware overwriting itself. Way off. Spy ware is constantly changing. that is the only way it can survive. It it never changed it would be caught by all the spy ware filters out there. So you wouldn't have to worry about it being over-written on your hard drive as a new file would appear.
Okay maybe you didnt read my post correctly or understand it. Let me expalin thi further.

There are spy ware fileters out there. Like Ad Aware or spybot search and destroy. Now you have these on your PC and they run. they catch the spyware and remove it. Now if you didnt run them the spyware you download would NOT, i repeat NOT, be the same exact file. Why you ask? Well because if it was the same exact file it would be CAUGHT by the Ad Aware or Spybot filters you run. So having the file on your PC even if it is just a blank .exe file WILL NOT PREVENT YOU FROM GETTING NEW SPYWARE AS THE"Y ARE NOT THE SAME!!!

Spy ware is constantly changing. It has to bypass these filter that people run so unless you plan on creating blank .exe files with every filename you can think of and them some to prevent spyware from downloading you will never stop it. NEVER.

So your trick no matter how weel thought out it may be will never work as Spyware is ever changing not only in file but in names. You will be infected with a new one before you could remove it and replace the file with a blank .exe file.

Do you get it now? Honestly? I mean there is no way. You would ahve at least 1 Billion blank .exe files to try and stop just part of the amount of spyware that is out there. Run the guide and the filters. That is the ONLY, i repeat ONLY, way to stop it. Your method will not work.
__________________
R.I.P. Danny L. Trotter
14 Nov 1945 - 4 Sept 2009
Images created by CarnageX | Decaptured...Listen! | Visit Baezware!! | You've been Mak'd! | 儿做好
I do not accept support questions via EMail, PM, IM or my Spaces page! .:|:. This is what happens when an unstoppable force meets an immovable object.
Thanks to all the guys on the staff for your support in my time of need. Hefe you are my personal Hero for your contribution.



<<<< If I help you, or you just like what I said, rep me
Mak213 is online now  
Old 01-23-2008, 07:31 PM   #19 (permalink)
peterhuang913's Avatar
 
Retired.

Join Date: Dec 2005

Location: Los Angeles, California

Posts: 8,090

peterhuang913 is an unknown quantity at this point

Send a message via AIM to peterhuang913
Default Re: replacing spyware files

Also, when the computer starts, it tries to run the blank exe and causes slowdowns.
__________________


My computer uses 1.5A-load, .8A-idle, .65A-standby, .05A-turned off on 125V.
"The spaces between your fingers were created so that another's could fill them in."
Quote:
Originally Posted by Norcent View Post
I need to stop using the internet.
peterhuang913 is offline  
 
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
HijackThis logs for Security Team members only Trotter Virus - Spyware Protection / Detection 34 01-25-2008 01:13 PM
Running a lil slow Max Power HijackThis Logs (finished) 4 01-02-2008 06:44 PM
New Log enigm@tic HijackThis Logs (finished) 4 12-13-2007 08:45 PM
friends log Static_11 HijackThis Logs (finished) 11 11-25-2007 10:27 PM