Viewpoint/Grokster keep reappearing - Page 2

Ried · 05-07-2007, 07:47 PM

Is Pest Patrol dealing with that entry and it then returns? Or is Pest Patrol unable to do anything with it.

Trymedia is considered Adware but it's required if you want to download and run their games. It's up to you if you wish to continue using it. Here's what Pest Patrol has to say about it http://www.ca.com/us/securityadvisor...x?id=453104861

Keradon · 05-07-2007, 08:30 PM

Quote:

Originally Posted by Ried

Is Pest Patrol dealing with that entry and it then returns? Or is Pest Patrol unable to do anything with it.

CA says it quarantines the entry, and then Grokster returns with next weeks' scan.

Ried · 05-08-2007, 09:45 PM

Then it would seem there is a program someone is using, or a site they are going to that is putting that back on the system. It would be most difficult for me to track that down.

Have Pest Patrol delete the entry. The next time it appears, note the date and look at the surfing history, or the games being played to try to narrow it down.

I'd like you to try Spybot and see if that entry still returns:

Spybot - Search & Destroy 1.4
Run Spybot and click on the 'Search for Updates' button. Install any updates that are available.

Now click Mode menu and choose 'Advanced Mode'.
Click on Immunize to your left.
Next, click the Immunize button on top to Immunize your computer - you need to do this each time there is an update.
Click 'Check for Problems' and fix all the entries, which are indicated in RED.

Keradon · 05-09-2007, 06:59 AM

Done. Grokster did not show up in Spybot. I'll keep an eye on it to determine what might be causing the Grokster recurrences.

Umm... I think that might be it, but is there anything else that should be done?

Ried · 05-09-2007, 07:52 AM

We're all set here.

Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links:

Reset hidden/system files and folders
Windows XP
===============
Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View tab.
* Deselect the Show hidden files and folders option.
* Select the Hide file extensions for known types option.
* Select the Hide protected operating system files option.
Click Yes to confirm.
Click OK.

Ensure Windows Auto Update is Enabled
*Go to Start>Run - type wuaucpl.cpl
*Tick on the checkbox - "Automatically download the updates, and install them on the schedule that I specify".
Click on "OK".

Create a new System Restore point
Click Start >> Run - type SYSDM.CPL & press Enter
* Select the System Restore Tab
* Tick on the checkbox - "Turn off System Restore on all drives"
Click Apply
* Then untick the same checkbox & click OK
This will prevent any reinfection from previous restore points.

You already have a good multi-layered protection set up, so I have no recommendations for any additional programs--but please take a look at these well written articles:

PC Safety and Security--What Do I Need?

HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein
THE ANTI-SPYWARE TUTORIAL
MAKING INTERNET EXPLORER SAFER
Understanding and Using Firewalls

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

-----------------------------------------------------

Follow the list above and the potential for infection will reduce dramatically.

Keradon · 05-16-2007, 10:51 AM

After a few days, the computer appears to be operating fairly well now! The only thing the various scanners pick up are usually tracking cookies which are promptly deleted.

Grokster hasn't shown it's ugly head in awhile... and I haven't been using BitTorrent... might be the reason?

I'll consider this resolved! :)

Ried · 05-16-2007, 11:02 AM

Cookies are just a part of 'Internet Life'. IESpyAd will help prevent a lot of those undesirable cookies when using IE. For Firefox you can adjust the settings via Tools>Internet Options>Privacy or just scan daily with AVG A-S or AdAware, etc to clean them out.

It may be that Grokster was coming in through BitTorrent. Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The 'bad guys' use P2P filesharing as a major conduit to spread their wares.

I'll mark this as resolved.

05-07-2007, 07:47 PM	#21 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,576 OS: WinXP and Vista	Re: Viewpoint/Grokster keep reappearing Is Pest Patrol dealing with that entry and it then returns? Or is Pest Patrol unable to do anything with it. Trymedia is considered Adware but it's required if you want to download and run their games. It's up to you if you wish to continue using it. Here's what Pest Patrol has to say about it http://www.ca.com/us/securityadvisor...x?id=453104861 __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

05-08-2007, 09:45 PM	#23 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,576 OS: WinXP and Vista	Re: Viewpoint/Grokster keep reappearing Then it would seem there is a program someone is using, or a site they are going to that is putting that back on the system. It would be most difficult for me to track that down. Have Pest Patrol delete the entry. The next time it appears, note the date and look at the surfing history, or the games being played to try to narrow it down. I'd like you to try Spybot and see if that entry still returns: Spybot - Search & Destroy 1.4 Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Now click Mode menu and choose 'Advanced Mode'. Click on Immunize to your left. Next, click the Immunize button on top to Immunize your computer - you need to do this each time there is an update. Click 'Check for Problems' and fix all the entries, which are indicated in RED. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

05-09-2007, 06:59 AM	#24 (permalink)
Keradon Registered User Join Date: Apr 2007 Posts: 27 OS: Windows XP	Re: Viewpoint/Grokster keep reappearing Done. Grokster did not show up in Spybot. I'll keep an eye on it to determine what might be causing the Grokster recurrences. Umm... I think that might be it, but is there anything else that should be done?

05-09-2007, 07:52 AM	#25 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,576 OS: WinXP and Vista	Re: Viewpoint/Grokster keep reappearing We're all set here. Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links: Reset hidden/system files and folders Windows XP =============== Click Start. * Open My Computer. * Select the Tools menu and click Folder Options. * Select the View tab. * Deselect the Show hidden files and folders option. * Select the Hide file extensions for known types option. * Select the Hide protected operating system files option. Click Yes to confirm. Click OK. Ensure Windows Auto Update is Enabled Go to Start>Run* - type wuaucpl.cpl Tick on the checkbox - "Automatically download the updates, and install them on the schedule that I specify". Click on "OK". Create a new System Restore point* Click Start >> Run - type SYSDM.CPL & press Enter * Select the System Restore Tab * Tick on the checkbox - "Turn off System Restore on all drives" Click Apply * Then untick the same checkbox & click OK This will prevent any reinfection from previous restore points. You already have a good multi-layered protection set up, so I have no recommendations for any additional programs--but please take a look at these well written articles: PC Safety and Security--What Do I Need? HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein THE ANTI-SPYWARE TUTORIAL MAKING INTERNET EXPLORER SAFER Understanding and Using Firewalls **Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them. ----------------------------------------------------- Follow the list above and the potential for infection will reduce dramatically. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

05-16-2007, 10:51 AM	#26 (permalink)
Keradon Registered User Join Date: Apr 2007 Posts: 27 OS: Windows XP	Re: Viewpoint/Grokster keep reappearing After a few days, the computer appears to be operating fairly well now! The only thing the various scanners pick up are usually tracking cookies which are promptly deleted. Grokster hasn't shown it's ugly head in awhile... and I haven't been using BitTorrent... might be the reason? I'll consider this resolved! :)

05-16-2007, 11:02 AM	#27 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,576 OS: WinXP and Vista	Re: Viewpoint/Grokster keep reappearing Cookies are just a part of 'Internet Life'. IESpyAd will help prevent a lot of those undesirable cookies when using IE. For Firefox you can adjust the settings via Tools>Internet Options>Privacy or just scan daily with AVG A-S or AdAware, etc to clean them out. It may be that Grokster was coming in through BitTorrent. Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The 'bad guys' use P2P filesharing as a major conduit to spread their wares. I'll mark this as resolved. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."