Ad/Spyware issue

Use this forum to discuss about anything you want, post announcements and informational topics.
Forum rules
We have no special rules for UVK forums. Just try to be polite and clear in your posts.
Please don't post spam in this forum. Spammers will be banned by IP, e-mail and username.
We reserve the right to delete all posts and ban all users we consider not having respected these rules without warning.
Post Reply
Charger440
Posts: 1529
Joined: Sun May 25, 2014 7:44 am
Location: Missouri

Ad/Spyware issue

Post by Charger440 »

I'm putting more for information and discussion than complaining. The following pictures were from a computer I just cleaned. I immunized and immunization was still active when he brought it back.

Can immunization prevent this? Are we immunizing the right places? From the bugs it seems he decided to visit a page he should not have after getting it back from me.
Attachments
20150703_183211-1024x768.jpg
20150703_183211-1024x768.jpg (131.12 KiB) Viewed 5330 times
20150703_183230-1024x768.jpg
20150703_183230-1024x768.jpg (92.56 KiB) Viewed 5330 times
20150703_183428-1024x768.jpg
20150703_183428-1024x768.jpg (161.19 KiB) Viewed 5330 times
Jim

It is not "Can it be done?" but rather, "How can we do it?"
Fred
Site Admin
Posts: 2370
Joined: Sat Jul 30, 2011 12:05 pm
Location: Red coast, France
Contact:

Re: Ad/Spyware issue

Post by Fred »

Jim, the immunization and Execute prevent doesn't prevent all infections, even if all the areas are immunized. There are other parts of the OS that could not be ummunized. for instance, I could not prevent Windows services from being added because if I change the permissions of the Services key windows will no longer work properly.

The third picture shows Firefox. Chrome and Firefox are not immunized yet, as I mentioned in another topic.
One thing we humans have in common is that we are all different. So, if you think you're weird because you're different from everyone else, then we are all weird.

Fred
Charger440
Posts: 1529
Joined: Sun May 25, 2014 7:44 am
Location: Missouri

Re: Ad/Spyware issue

Post by Charger440 »

On the firefox deal, I rmember you saying that but I was thinking this spyware/adware had install from the temp directory or should have anyway....... Anyway later today when I have tie to sit down and write I will elaborate more more on the other post you asked me about and I'll explain more what I meant about this one.
Jim

It is not "Can it be done?" but rather, "How can we do it?"
Fred
Site Admin
Posts: 2370
Joined: Sat Jul 30, 2011 12:05 pm
Location: Red coast, France
Contact:

Re: Ad/Spyware issue

Post by Fred »

One thing that would help in cases like this one is to use the Process manager's window catcher to identify the path the program is being run, and post that path. Without knowing the path, it's impossible to say if something is wrong.

If the program runs from the temp directory, execute prevent does not block it, obviously.
One thing we humans have in common is that we are all different. So, if you think you're weird because you're different from everyone else, then we are all weird.

Fred
mickybee
Posts: 17
Joined: Thu Feb 26, 2015 7:14 pm
Location: uk

Re: Ad/Spyware issue

Post by mickybee »

hi guys getting used to using this great program when i am using the process manager how do i use the
window catcher
when i right click the mouse button on a process it brings down the menu for all the options that you can use witch is fine , so is the windows catcher doing the same thing when i drag that over a process with the right mouse button it brings down the same menu.
Fred
Site Admin
Posts: 2370
Joined: Sat Jul 30, 2011 12:05 pm
Location: Red coast, France
Contact:

Re: Ad/Spyware issue

Post by Fred »

mickybee, you don't drag the window catcher over a process. You drag it over the window of another program, to identify the process that created the window.

http://www.carifred.com/uvk/help/proces ... ow_catcher
One thing we humans have in common is that we are all different. So, if you think you're weird because you're different from everyone else, then we are all weird.

Fred
mickybee
Posts: 17
Joined: Thu Feb 26, 2015 7:14 pm
Location: uk

Re: Ad/Spyware issue

Post by mickybee »

are yes thank you fred i have got it now
Charger440
Posts: 1529
Joined: Sun May 25, 2014 7:44 am
Location: Missouri

Re: Ad/Spyware issue

Post by Charger440 »

Fred

OK, I am finally getting time to sit down and say what I was asking. You are writing UVK and possibly more specifically Execute prevent and UAK to clean up and prevent infections. I realize you probably don't want to reinvent the wheel with these apps but my question is this.

When we run across spyware adware that UVK didn't detect, do you want the details of it so you can add it to Execute prevent and/or UAK to gradually make it better at detecting stuff? I don't mind posting stuff that makes it through but if it's not your goal to clean "all this" junkware I don't want you to feel like we are saying you are missing things when you technically really wouldn't be.

Does that make more sense now? I'm not sure if I am doing a good job explaining what I mean.
Jim

It is not "Can it be done?" but rather, "How can we do it?"
Fred
Site Admin
Posts: 2370
Joined: Sat Jul 30, 2011 12:05 pm
Location: Red coast, France
Contact:

Re: Ad/Spyware issue

Post by Fred »

Hi Jim. Thanks for clearing out your question.

Of course I would like to get reports of the missing detections. In fact, I intend to add a forum for Ultra adware killer, specifically for missing and false detections, and bug reports.
One thing we humans have in common is that we are all different. So, if you think you're weird because you're different from everyone else, then we are all weird.

Fred
Post Reply