Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Win Spy Software Part4 (The war continues)

1 view
Skip to first unread message

rislabho...@discussions.microsoft.com

unread,
Aug 25, 2005, 5:02:16 PM8/25/05
to
Well people it's been sometime since I last posted to this site requesting
info on how to remove Win Spy Software off of my home computer. I've managed
to find out that it is hiding in the flobby drive. I uninstall it and it
just starts right back up. As soon as I log on, the flobby drive boots.
I've tried all of the suggestions in the past that were mentioned in the
original post, part1, part2 and part3. None of it has helped. I've tried to
download spyware programs and Win Spy has managed to corrupt all of them. It
didn't get to CounterSpy until after I ran the program the first time, after
that, it attacked it and I ended up removing it from the computer. It did
the same with Microsoft Spyware too. Which I had to remove also. I'm
getting close to sinking an axe into this computer. I would love nothing
more then to do the same with the individual/s who install Win Spy on my
computer. Which brings me back to my original question. Does anyone out
there know of a way to remove Win Spy off of a computer? Before suggestions
are given, please check out the first 3 post of this, they are all named the
same(Win Spy Software) in the subject heading, that way I won't be trying the
same procedures over again, which like I said ealier, didn't work. I don't
believe that there is no way to remove this, there has to be a way. One
other thing I'd like to know, is there a way how I can find out who put this
on my computer? Where is the info going to? I've had trouble in the past
with Win Spy making it hard for me to get back online in the past, so please
if I don't log back on right away, it's because Win Spy is doing it's best to
keep me from getting the info I need to remove it. Thanks people for all of
the suggestions in the past and I'm looking forward to trying something new.

Carey Frisch [MVP]

unread,
Aug 25, 2005, 5:15:11 PM8/25/05
to
WIN-SPY - STEALTH MONITORING SOFTWARE FOR WINDOWS
http://www.win-spy.com/

Support
http://www.win-spy.com/html/spyware_contacts.html

Spyware Encyclopedia
http://www3.ca.com/securityadvisor/pest/search.aspx?pst=Win-Spy&allwords=true

Step-by-step instructions to remove Win Spy from your computer
http://www.spywareremove.com/removeWinSpy.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

-------------------------------------------------------------------------------------------

rislabho...@discussions.microsoft.com

unread,
Aug 25, 2005, 6:13:01 PM8/25/05
to
I download Spyhunter and if it weren't for my wallet being empty, I'd try it
out. It did find alot of junk on this computer, but like I said, I'm broke
and can't afford to purchase any programs now. Anyone know of a free program
that might remove Win Spy and I'd really like to find out who put Win Spy on
my home computer. I bought this computer new at Wal-Mart. I have tried to
follow the manaul instructions and when it came to using Task Manager to end
processes that Win Spy was using, it would tell me that Task Manager could
not end these processes.

Sharon F

unread,
Aug 25, 2005, 7:23:28 PM8/25/05
to
On Thu, 25 Aug 2005 15:13:01 -0700, ris...@hotmail.com wrote:

> I download Spyhunter and if it weren't for my wallet being empty, I'd try it
> out. It did find alot of junk on this computer, but like I said, I'm broke
> and can't afford to purchase any programs now. Anyone know of a free program
> that might remove Win Spy and I'd really like to find out who put Win Spy on
> my home computer. I bought this computer new at Wal-Mart. I have tried to
> follow the manaul instructions and when it came to using Task Manager to end
> processes that Win Spy was using, it would tell me that Task Manager could
> not end these processes.
>

Carey's last link is for a program that offers a free version of software
that can be used to remove this. (They also show a version for purchase but
that is an option and not the only way to tackle this problem.)

That page also has directions for manually removing Winspy. "Manually
removing" means that you do all of the removal steps instead of having a
program do it for you.

--
Sharon F
MS-MVP ~ Windows Shell/User

Sharon F

unread,
Aug 25, 2005, 7:26:08 PM8/25/05
to
On Thu, 25 Aug 2005 14:02:16 -0700, ris...@hotmail.com wrote:

> I've managed
> to find out that it is hiding in the flobby drive.

Spyware cannot hide in a floppy drive.

It could be on a floppy disk and if that disk is in the drive when the
computer is booted and the disk was also bootable, then the spyware could
reinsert itself. However, that's a lot of ifs that all have to be in place
and is not likely.

Harry Ohrn

unread,
Aug 25, 2005, 10:39:14 PM8/25/05
to
If your floppy drive light comes on that simply means that Windows or some
app is looking for a floppy. The floppy drive itself has no way to retain
any files if there is no disk in the drive but the light can come on and it
can make a lot of noise searching for disk.

I once had to go through a lot of work to get rid of a really nasty little
spyware app. It was not Win Spy though. But what this app had the ability to
do was to reside in the system memory. You could clean it out manually from
the hard drive but as soon as you shutdown the computer it would write
itself back to the drive as the system shutdown. Very sneaky. It also kept
changing it's name so it was very hard to find. What I had to do was run the
removal process from Safe Mode then I had to cut the power by pulling the
power cord and doing a hard shut down. This prevented the shutdown sequence
and prevented the app from reinstalling itself. I spent 9 hours trying to
get rid of this thing.

In your case you may just wish to bite the bullet and do a fresh install of
your operating system. You might spend many, many more unsuccessful hours
trying to get rid of this thing.

Try printing this out
http://esd.element5.com/publisher/50364/proxy.cgi/62438/avcenter/venc/data/spyware.winspy.html
and then boot to Safe Mode and follow the instructions. Make sure you purge
your System Restore points. Yank the power cord and let the system sit for a
few minutes before plugging back in. Reboot to Safe Mode and check again.

--

Harry Ohrn MS-MVP [Shell/User]
www.webtree.ca/windowsxp


"ris...@hotmail.com" <rislabho...@discussions.microsoft.com> wrote in
message news:5EB8ECF1-C5FE-4ACE...@microsoft.com...

gls858

unread,
Aug 26, 2005, 10:22:20 AM8/26/05
to
Harry Ohrn wrote:
> If your floppy drive light comes on that simply means that Windows or some
> app is looking for a floppy. The floppy drive itself has no way to retain
> any files if there is no disk in the drive but the light can come on and it
> can make a lot of noise searching for disk.
>
> I once had to go through a lot of work to get rid of a really nasty little
> spyware app. It was not Win Spy though. But what this app had the ability to
> do was to reside in the system memory. You could clean it out manually from
> the hard drive but as soon as you shutdown the computer it would write
> itself back to the drive as the system shutdown. Very sneaky. It also kept
> changing it's name so it was very hard to find. What I had to do was run the
> removal process from Safe Mode then I had to cut the power by pulling the
> power cord and doing a hard shut down. This prevented the shutdown sequence
> and prevented the app from reinstalling itself. I spent 9 hours trying to
> get rid of this thing.
>
> In your case you may just wish to bite the bullet and do a fresh install of
> your operating system. You might spend many, many more unsuccessful hours
> trying to get rid of this thing.
>
> Try printing this out
> http://esd.element5.com/publisher/50364/proxy.cgi/62438/avcenter/venc/data/spyware.winspy.html
> and then boot to Safe Mode and follow the instructions. Make sure you purge
> your System Restore points. Yank the power cord and let the system sit for a
> few minutes before plugging back in. Reboot to Safe Mode and check again.
>
To add to Harry's comment. Since your system has been compromised
it's very difficult to determine exactly what else might have
been put on your computer without your knowledge. I had a similar
experience and even thought we managed to clean the virus the
tech helping me recommended that we wipe the drive. That way you
know exactly what's there. Better safe the sorry. Of course in our
case this was a laptop that connected to our network and had the
potential of infecting many machines.

gls858

gls858

0 new messages