718 infected files...

**Pathos** · May 5th, 2004, 11:36 PM

I just ran a trial version of ad-aware gold, and it found 718 (!) infected files that ad-aware 6 could not pick up. Unfourtunately I cannot remove these files without purchasing ad-aware 8, which, it should go without saying, I cannot afford.

I also could find no reference on lavasoft's site to ad-aware gold. could it be a hoax to get people to buy a bogus product?

**EvilRick** · May 5th, 2004, 11:47 PM

Where did you get a "Gold" version. Are you sure it's not the Professional version they offer?

**Pathos** · May 6th, 2004, 12:25 AM

Yeah, I'm getting to be pretty sure that the "gold" version is a scam because I am sure it's not the professional version.

**nomaxim** · May 6th, 2004, 02:37 AM

I've had Ad-Aware pro for 2 years and they are only upto v.6.

Do you have a link to the site that you are finding this 'gold' and v.8?

**Pathos** · May 6th, 2004, 07:11 PM

I killed the file and my history has been cleaned...I have no link.

However, I've run spybot S&D and ad aware...and something is still running. I'm not sure what it is, but when I try to play games my ping doesn't go below 800...about last week it used to be closer to 20-30.

Can anyone suggest a way to start looking in order to find out what the problem is?

**golfcart** · May 6th, 2004, 07:36 PM

Maybe it's the sasser worm? There is a news article about it at the top right of this page

**Pathos** · May 6th, 2004, 08:13 PM

I will re-read the article right now. I was fairly sure sasser has nothing to do with it.

**Pathos** · May 6th, 2004, 09:33 PM

after running quite a few removal programs, here is my highjackthis log. things are running better, but i just KNOW there is still some stuff on my machine. also, my ping is still not even close to decent when playing online. I have a theory that my ISP slows down my connection when our bill is late, but I don't think that's it...please advise if you think you know what's up!

Logfile of HijackThis v1.97.7
Scan saved at 6:28:18 PM, on 5/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Documents and Settings\Christopher\Local Settings\Temp\HijackThis.exe

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

**M_Six** · May 6th, 2004, 09:49 PM

Try Active Ports. It'll tell you what's running on which port.

http://www.protect-me.com/freeware.html

Again I tried to post a hyperlink and the page reset. Gotta get that fixed, Mods.

I also HIGHLY suggest you run Stinger to check for viruses. It's free.

http://vil.nai.com/vil/stinger/

**The Real Bingo** · May 6th, 2004, 10:01 PM

Well if that's the first time you ran any spyware/adware programs I wouldnt be suprised to get that many. I had a computer for 2 years before I ran anything and I think I came up with some 800 objects. Never heard of AdAware Gold, though.

**elroy** · May 7th, 2004, 11:50 AM

I noticed there is another company using the url
http://www.ada-ware.com/
This is not the Adaware program often referred to in this forum.

The real Adaware is available here
http://www.lavasoftusa.com/

**DanGrease** · May 7th, 2004, 11:56 AM

Never heard of Version 8 or a Gold version of Ad-Aware.
Just download the free version of Ad-Aware together with Spybot S&D.
Also, download SpywareBlaster, to protect you from getting spyware again.

Elroy, the site you posted offer a product called Spy Assassin.
I would just stick with Ad-Aware and Spybot S&D and stay away from that product.

dan

**Kimbo** · May 7th, 2004, 12:55 PM

Here's another:Adware Remover Gold. Looks like a demo version to find ad/spyware but won't remove it until you buy.

I'm with everyone else - stick to Lavasoft Ad-aware 6.181.