Spyware... Zedo and Surf Sidekick

Cyno01 · 17-May-06, 12:32 AM

Title says it all, i dont know how i got infected, didnt install anything, or visit any questionable sites, or use IE at all or even firefox, but it happened. Zedo and Surf Sidekick seem to be the problems, adaware, spybot, windows malicious software removal tool... nothing left on any of those, but i'm still getting IE pop-ups outa nowhere ("brought to me" by the aforementioned. Does anybody know how to get rid of these specifically? And no, before 20 lazy people say it, i'm not reformatting.

Nerdz · 17-May-06, 10:10 AM

The Usual Arsonal of items.

First, Adaware, then Spybot, then MSAntispyware (now called windows Defender-WTf?!) and then AVG (or what ever anti viral your have). Restart in safe mode, repeat the above. Keep doing so until spyware is gone. Oh use CWS Shredder incase too.

ADD- Check add remove programs too, try to uninstall it in safe mode (if possible)

Cyno01 · 17-May-06, 11:43 AM

Quote:

Originally Posted by Nerdz


	The Usual Arsonal of items. First, Adaware, then Spybot, then MSAntispyware (now called windows Defender-WTf?!) and then AVG (or what ever anti viral your have). Restart in safe mode, repeat the above. Keep doing so until spyware is gone. Oh use CWS Shredder incase too. ADD- Check add remove programs too, try to uninstall it in safe mode (if possible)

I tried all those, and they dont catch either of those, i just found an uninstaller for surf sidekick, so ill se if that actualy is, but yeah, nothings getting zedo.

Nerdz · 17-May-06, 01:32 PM

Quote:

Originally Posted by Cyno01


	I tried all those, and they dont catch either of those, i just found an uninstaller for surf sidekick, so ill se if that actualy is, but yeah, nothings getting zedo.

Try this page too
http://forums.spywareinfo.com/lofive...hp/t72834.html

Hibiki · 17-May-06, 03:57 PM

When the popups come up, what program opens them? IE, or your other browser?

If you haven't already, disconnect your computer from your internet connection.

If it's IE, do both of these:
1. Control Panel > Internet Options > Delete Cookies > OK
2. Control Panel > Internet Options > Delete Files > Check the box > OK

THRiLL KiLL · 22-May-06, 12:12 PM

http://forums.pcapex.com/windows_os_...tml#post530839

also run this...

Hijack This
http://www.merijn.org/files/hijackthis.zip

HijackThis log analysis
http://www.hijackthis.de/index.php?langselect=english

Devrial · 05-June-06, 09:22 AM

I believe ewido can detect this not sure if it can remove all traces www.ewido.net

Darksamurai · 05-June-06, 10:27 AM

I ran a find on "Zedo" in regedit... I managed to kill enough of it to where it only seems to work once in a blue moon. I can't say I killed it... I ran a bunch of trialware anti-spyware suites against it. It only helped 'til I rebooted.

I hate Zedo, that crap is REALLY obnoxious.

WDoG · 05-June-06, 11:04 AM

The ewindo program that Devrial suggested works very well. I had spyfalcon on my laptop only ewindo was able to remove it. Adaware, spybot, norton internet security, none of them found anything. Try eindo it worked with me. Also try smitRem.

4x0n · 05-June-06, 11:38 AM

Try running the antivirus program on www.antivirus.com while in safe mode, that way the program shouldn't be running. Also check some process checkers like WinPatrol (found on download.com) or MalWhere (www.malwhere.com) or just check all the processes that are running at http://malwhere.com/processes/index.html .

Cyno01 · 05-June-06, 02:52 PM

I think i've cleared everything out. For a while there was nothing that anything could find but i was still getting IE pop-ups, then i went through all my running processes and found thieslt.exe or something like that and deleted it, theres still probably crap in my registry, but nothings acting funny, so im happy.

Jager · 05-June-06, 03:21 PM

cwsshredder works pretty good too.

Devrial · 06-June-06, 08:40 AM

smitrem is the outdated version use http://tinyurl.com/llo2e it's called smitfraudfix but mostly designed for fake anti spyware software like spyfalcon or spysheriff can also remove winhound from the system don't think it works on zedo. Another good scan if you got some time the full system scan on http://safety.live.com

cruelk · 11-September-06, 04:57 AM

Update ewido and run it in safe mode with smitfraud fix and or smitrem. You also may want to disable system restore. Just make sure to re-enable it afterwards,

17-May-06, 12:32 AM		#1 (permalink)
Cyno01 Apex Tech God	Spyware... Zedo and Surf Sidekick Title says it all, i dont know how i got infected, didnt install anything, or visit any questionable sites, or use IE at all or even firefox, but it happened. Zedo and Surf Sidekick seem to be the problems, adaware, spybot, windows malicious software removal tool... nothing left on any of those, but i'm still getting IE pop-ups outa nowhere ("brought to me" by the aforementioned. Does anybody know how to get rid of these specifically? And no, before 20 lazy people say it, i'm not reformatting.

11-September-06, 04:57 AM		#14 (permalink)
cruelk Apex Techie Lite	Re: Spyware... Zedo and Surf Sidekick Update ewido and run it in safe mode with smitfraud fix and or smitrem. You also may want to disable system restore. Just make sure to re-enable it afterwards,

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Listen to my Surf Radio Show	SexyPants	Anything Goes	39	15-February-07 07:38 PM
Mozilla Pay to Surf?	Enko	Anything Goes	5	23-February-05 05:55 PM
Slashdot // Anti-Spyware Vendor Partners with Spyware Company?	Gizmo	Slashdot RSS	0	02-November-04 09:03 PM
Are You Too Stupid to Surf?	Lokie	PC Apex Web News	1	12-September-03 08:03 PM
Sit and Surf: MSN Introduces the iPotty	scapegoat	PC Apex Web News	6	06-May-03 01:21 PM

17-May-06, 10:10 AM		#2 (permalink)
Nerdz Sir Knight of Spamalot	The Usual Arsonal of items. First, Adaware, then Spybot, then MSAntispyware (now called windows Defender-WTf?!) and then AVG (or what ever anti viral your have). Restart in safe mode, repeat the above. Keep doing so until spyware is gone. Oh use CWS Shredder incase too. ADD- Check add remove programs too, try to uninstall it in safe mode (if possible)

17-May-06, 03:57 PM		#5 (permalink)
Hibiki Apex Tech Maniac Supreme	When the popups come up, what program opens them? IE, or your other browser? If you haven't already, disconnect your computer from your internet connection. If it's IE, do both of these: 1. Control Panel > Internet Options > Delete Cookies > OK 2. Control Panel > Internet Options > Delete Files > Check the box > OK

22-May-06, 12:12 PM		#6 (permalink)
THRiLL KiLL PcApEX's PuNK ROckER	http://forums.pcapex.com/windows_os_...tml#post530839 also run this... Hijack This http://www.merijn.org/files/hijackthis.zip HijackThis log analysis http://www.hijackthis.de/index.php?langselect=english

05-June-06, 09:22 AM		#7 (permalink)
Devrial Apex Techie Wannabe	I believe ewido can detect this not sure if it can remove all traces www.ewido.net

05-June-06, 10:27 AM		#8 (permalink)
Darksamurai Sam-Hoe-rai N-Hoe-mad	I ran a find on "Zedo" in regedit... I managed to kill enough of it to where it only seems to work once in a blue moon. I can't say I killed it... I ran a bunch of trialware anti-spyware suites against it. It only helped 'til I rebooted. I hate Zedo, that crap is REALLY obnoxious.

05-June-06, 11:04 AM		#9 (permalink)
WDoG Apex Elite Tech	The ewindo program that Devrial suggested works very well. I had spyfalcon on my laptop only ewindo was able to remove it. Adaware, spybot, norton internet security, none of them found anything. Try eindo it worked with me. Also try smitRem.

05-June-06, 11:38 AM		#10 (permalink)
4x0n Proud New Daddy	Try running the antivirus program on www.antivirus.com while in safe mode, that way the program shouldn't be running. Also check some process checkers like WinPatrol (found on download.com) or MalWhere (www.malwhere.com) or just check all the processes that are running at http://malwhere.com/processes/index.html .

05-June-06, 02:52 PM		#11 (permalink)
Cyno01 Apex Tech God	I think i've cleared everything out. For a while there was nothing that anything could find but i was still getting IE pop-ups, then i went through all my running processes and found thieslt.exe or something like that and deleted it, theres still probably crap in my registry, but nothings acting funny, so im happy.

05-June-06, 03:21 PM		#12 (permalink)
Jager Apex Tech Fanatic	cwsshredder works pretty good too.

06-June-06, 08:40 AM		#13 (permalink)
Devrial Apex Techie Wannabe	smitrem is the outdated version use http://tinyurl.com/llo2e it's called smitfraudfix but mostly designed for fake anti spyware software like spyfalcon or spysheriff can also remove winhound from the system don't think it works on zedo. Another good scan if you got some time the full system scan on http://safety.live.com