help!!!! i have a spyware software on my pc. i think i got it from shareaza, but who knows.

its called ActMon, which is a key logger - how do i get rid - its stops symantec from working on startup, and when i do a scan eventually, symantec dowsnt recognise it! - help!

apparently - actmon Remains resident in computer memory, does not "quit".

The program is probably launched at startup.

Try downloading Spybot, that should remove Actmon.

is there a free version?

Spybot:thumbup:

Don't forget to change all passwords, as it's a keylogger someone else may now have them

Best of luck

Taz

Yep I use spybot as well, it's free and really good!!!!

http://www.safer-networking.org/en/index.html

If it's like the sort my eldest had recently, google it to find the best way to remove (quite a few embed themselves in your system and mask themselves as system files). I would suggest you will need a registry cleaner as if like some of the ones out now Spybot won't get rid of it, and a registry cleaner is needed to remove the remains of it.

A google showed upmplenty, here is 1 link.

http://www.topshareware.com/ActMon-Computer-and-Internet-Monitoring-download-13302.htm

It looks like a proper logging program (whether you consider a logging program good or bad), so won't be listed as spyware and has obviously been placed in your sysetm.

You will need to uninstal it (if possible) and clean out the system and registry.

Also try Hitman Pro (it downloads and runs a lot of anti-spyware programmes, and then removes them by itslef), C-CLeaner, and the Foxie firewall package that includes some very thorough anti spyware software....

If it stops Norton on startup, they probably have a fix for it already.

Generally for these things, I'm also inclined to go the Google route for info first as some can leave a hidden file which then re-introduces other files which you thought had been safely removed.

Such info can show exactly which files will have been installed, so you can be sure you've got them all if you remove them manually, although sometimes a specific removal tool has been written which clears them all.

I agree about changing passwords of course.

Regards

Mo

If it can stop your A/V then I would fairly sure it's embedded in your system, probably windows/system32, and may well need manually removing. Your A/V or anti spyware proggies may well not pick it up because it looks like a system file, but of course it isn't.

I would avoid net activity until it's removed though, so arm up and get digging.

Only 'totally' safe way is to format and reinstall.

If you have internet banking etc chnage your passwords from a different PC and inform you bank.

Ive just up graded my free Microsoft Spyware to the new Windows Defender, seem to be working quite well for me atm.

No idea if this is relevant, I know **** all about computers.

Only 'totally' safe way is to format and reinstall.

If you have internet banking etc chnage your passwords from a different PC and inform you bank.

Maybe, but surely its better to try and rectify the problem and so further your understanding of your pc.

Have a look at Hijackthis too - fantastic for manually removing processes and baddies - not so easy to use if you're not a techie but very, very effective.

Maybe, but surely its better to try and rectify the problem and so further your understanding of your pc.

yes, ideally. problem is once a machine's compromised, you can never be 100% sure it's clean. keyloggers can and do target online banking. the missus lost 4 grand through one of these.

if you want to try cleaning it yourself use:

ewido

spybot search and destroy

mcafee stinger

hijack this!

cwshredder

and run them in safe mode if having trouble removing stuff

ric

...If you have internet banking etc chnage your passwords from a different PC and inform you bank.

Hadn't thought of... I do only use one card for the Net though, so would certainly expect to cancel and have it re-issued if I susp[ected a problem.

On a different tack, there's a program called InCtrl5 that monitors changes to the system (i.e. reports where files have arrived on your system). The software is free, though it's offered by PC Magazine which carries a $20 subscription cost. (They do offer a lot of other free software also.)

I got it, but haven't set it up yet There's a good write-up here:http://www.pcmag.com/article2/0,4149,9882,00.asp

Not sure if it records all changes, or only those during an intended download. It doesn't work retrospectively, BTW.

Must get off Briskoda and get mine up and running LOL.

Regards

Mo

Ive just up graded my free Microsoft Spyware to the new Windows Defender' date=' seem to be working quite well for me atm.

No idea if this is relevant, I know **** all about computers.[/quote']

Ross

That program is quite good by all accounts. However, where spyware is concerned, one line of defence isn't usually enough. This is what I use to protect my PC at home:

Spyware Blaster

Spybot S&D

AdAware

AVG Free Antivirus

ZoneAlarm Firewall

CCleaner - Good for clearing out all the dross etc.

All available free off t'internet.

Some might consider it overkill, but works quite well (Oh no, shouldn't have said that!)

All the Best

Chris

Ross

That program is quite good by all accounts. However' date=' where spyware is concerned, one line of defence isn't usually enough. This is what I use to protect my PC at home:

Spyware Blaster

Spybot S&D

AdAware

AVG Free Antivirus

ZoneAlarm Firewall

CCleaner - Good for clearing out all the dross etc.

All available free off t'internet.

Some might consider it overkill, but works quite well (Oh no, shouldn't have said that!)

All the Best

Chris[/quote']

I run pretty much the same as you, although I run the Kaspersky AV. Other than that the list is the same. I also run PestPatrol (may be the same as AdAware) and MailWasher.

Paranoid? Moi? You bet!

Oh and for a really good clean out of your hard drive, try Necrofile. Always useful if you are giving an old machine to someone else. Totally wipes all the free disk space making anything that was on there unrecoverable. Recommended to me by someone from one of the police anti-computer crime units

Maybe, but surely its better to try and rectify the problem and so further your understanding of your pc.

Yes, but if you say to the bank oh yeah i tried to fix it but it didn't work when i t happens a second time they might well tell you to get lost. Some spyware embeds itself so deeply into windows, even hiding itself from the OS, that it is virtually impossible to remove. Some things are even using modified versions of system files, so if you delete it you will trash the system and a in a few cases that I have seen they things are behaving like a root kit and hiding itself from the OS and intercepting system calls. Only reason you can tell that is happening is by watching the thing send it's messages with something like ethereal, a debugger and knowing what you are doing.

I agree usually with what you say, but with spyware etc, you can't really risk it.

I run pretty much the same as you' date=' although I run the Kaspersky AV. Other than that the list is the same. I also run PestPatrol (may be the same as AdAware) and MailWasher.

Paranoid? Moi? You bet!

Oh and for a really good clean out of your hard drive, try Necrofile. Always useful if you are giving an old machine to someone else. Totally wipes all the free disk space making anything that was on there unrecoverable. Recommended to me by someone from one of the police anti-computer crime units [/quote']

Prevention is usually better (translate: easier) than cure. If we can stop 'em getting on there, it's easier than trying to get 'em off.

Haven't tried Mailwasher though. Thanks for the heads-up on Necrofile.

All the Best

Chris

I agree usually with what you say' date=' but with spyware etc, you can't really risk it.[/quote']

You should,if you do any sort of on-line banking/financial transaction have a temp file & cache cleaner to run after you have finished with the money stuff. Then reboot.

Do that, and you help protect yourself.

I will give you my protections set up..

Real time running stuff

Broadband router with built in firewall.

Comodo firewall (free) excellent at stopping anything getting in or out without permission.

Nod32...(paid) top notch a/v.

Wormguard....(paid) anti worm program

ProcessGuard...(paid) intercepts every application beforany action is taken

Appdefend...(paid)intercepts before ProcessGuard

Regdefend..(paid) protects the registry, and stops anything being altered or written to it unless I say so.

SpywareGuard.....(free) stops plenty of spyware including brower hyjackers

SpywareBlaster... (free) again stops certain spyware

Comodo Verification engine... (free) checks the validity of safety certifications

Spoofstick..(free) checks the actual ip address you are visiting and displays it in text/name form.

On demand stuff

Zerospyware (free version) anti spyware program

Spyware Doctor (free version) antispyware program

TDS3 (paid but now discontinued) anti trojan program, but lots of extra bits to it

Tracks Eraser Pro...(paid) wiping program that clears out temp files, cache, and anything you want removed.

MRU Buster.. (free) clears away you most recently used lists

WinAso Registry Optimiser (paid..but free version available) cleans the registry of unwanted and usless bits.

As you can see, my list is fairly extensive but with total multi layer protection.

I run an a/v scan,and antispyware scan every weekend...and they don't usually find anything which suggests I am fairly well protected. However, I run Tracks Eraser and MRU buster before each shutdown of the pc, as well as seperate runs of each after any financial action on the pc, followed by a reboot.

I am no expert when it comes to pc security, however it is something that concerns me and has lead me to trying lots of programs and set-ups, which is why my list is at it is. It may seem a lot, but every net access only gives me 4 questions to answer before access i granted, and any software application may need 1 or 2 questions.

Ultimately, it's how secure you want to feel or be bothered with.

As for the hiding of spyware in your system, I find Google excellent for inforamtion on different problems, which often lead to technical information sites which take you through the steps, and point out which system files should or should not be present. However if I had an infection of that sort, I would wipe all cache and stuff, google on the infection, then cut the net access and go digging. It's easier than many think, and saves a reformat which being honest isn't certain to kill the problem if the infection is in a downloaded file you already have on your hard drive ready to reinstal after reformatting, thus starting the problem all over again.

I would Highly Recommend not posting what programs you use for Virus / Firewall / Spyware etc

Rich AKA Paxo

how well do you understand task manger and Admin Tools / services ???

I can PM you or show you through msn what the best places to manually check for problems

I would Highly Recommend not posting what programs you use for Virus / Firewall / Spyware etc

Why?

The software is freely available, no warranty implications apply and all the list does is to help people out with possible solutions.

Re not listing products.

Agree on kentish there, why?

It's not like i know the version numbers and so the exploits and you can work out what is what pretty quickly by the sort of responces you will get back from the machine running them without asking the user

Re Kentish comments:

a) How slow does your PC run with all of that on.

Problem is keyloggers will capture what you type so if it is on your system it's already too late if you have typed anything you wanted to keep secret.

c) Thing that intercept calls will be almost impossible to find.

If you are at all worried about your security, the only safe option is to backup data and format and reinstall.

When working as a sys-prog, if a linux or windows server ever got comprimised it was a total reinstall and a bring the data back from the last backup. This is because ther eis always that small chance you may have missed something so starting from a clean slate is the only way to be sure you are clear.

The learning experience of reinstalling and then putting a few suitable programes on your PC to stop it happening again is a good thing.

Also I would advise anyone to be careful of which things you install as some spy/addware software will actually be spy/adware in iself hidden in a remover.

Obviously there are many good ones out there, but you should make sure you check the thing out first

I,m running a 3gig Athlon, 1 gig ram, on a 10 meg cable con.

The pc runs fine, with next to no system slowing.

Nothing gets into, or out from my system unless I specifically allow it, right down to every single port used.

I choose programs that aren't resource hogs, bloatware or just plain useless.

If you have any doubts about any of the software, take a peek yourself at it and you may be surprised at how strong it can be.