Spyware removal

Is there a program that can succesfully remove the spyware called Warez P2P? Everytime I remove it with Microsoft Antispy (which is the only program I have that detects it) it comes back next time. I also run Spybot and Adware both of which do not show it as a problem.

Any ideas? Maybe it`s a false reading?

Jason.

Not sure if this helps:
* http://d3nn1as.blogsome.com/2005/12/09/warez-p2p-broke-my-p2p

Have you got new.net installed too?
You may well have Trojan-Downloader.Win32.Small.apc in your system as well. See:
* http://www.pctools.com/anti-virus/encyclopedia/virus/Trojan-Downloader.Win32.Small.apc/

Hi Jim, I do not really understand what that links referring to. I have only just recently reformatted my hard drive and have not installed any p2p software if thats what it is saying. I`m not sure where this pesky spyware has come from.

By new.net do you mean have I installed the latest version of .net from the Microsoft site. If this is what you mean then yes I am running it. If not then could you please explain a little more.

Thanks,
Jason.

Go to Add/Remove programs and see if you have new.net present in the list.

You might want to run the trial version of Kaspersky to see if that picks anything up:
http://www.kaspersky.com/trials

Also, HijackThis is worth a try. It'll list everything which gets started up alongside all the processes running in the background.

XoftSpy

OK, well new.net is not present in the add/remove list so I`m going to try the other things that you recommend now. I`ll let you know what I find.

Jason.

Hmmm strangely nothing else is picking it up. I have tried HijackThis and Kaspersky and nothing.

Should I still be concerned about this?

Jason.

What effect (if any) does it have on your PC?
Do you get popups for example?

There's one other handy utility I can think of:

www.winpatrol.com

WinPatrol can detect changes to IE's home and search pages. It'll also give details on startup programs, services, tasks, cookies, IE 'helper' files, etc..

Thanks Jim for the help but I have tracked it down to a piece of software I am using, here`s the quote from its author.

"Thanks for reporting this however we have no clue what this P2P Software bundler is.
The only explanation I can come up with is a false positive as most of these scans base themselves on 'signatures'. It could be by extreme coincidence that there is a string combination within our software that is identical to that of the one he is checking against for this P2P Software Bundler.

Perhaps the most convincing explanation I can give you is that if it was our intention to include Spyware and other malicious stuff in our software, we wouldn't be charging for it but we would simply give it away for free :-).

As this is not the case, I can assure you that you are quite OK with using our software."

As the author is a decent guy is it ok to believe this do you think?

Jason.

What's the name of the program triggering the alert?

EZ Generator, from the creators of Fruity Loops. It`s a web design app.

Jason.

As far as I know, 'Warez P2P' is not spyware/malware as such. As for its removal, I wouldn't have thought it was complex. Any problems speak to these guys: http://www.warezclient.com/

OK spyware/malware.

Rule #1: No one tool is going to remove all Spyware / Malware from your machine...

Rule #2: Spyware / Malware (well some of it...) can actually HIDE from some detection software...

Rule #3: Go to www.snapfiles.com and download several of the freeware programs:

Microsoft Antispyware
EMCO Malware Destroyer
AdAware SE

While you are at it you might search for REGCLEANER by Vuorio (look for the freeware beta and good luck finding it!) so you can see what on your system including hidden startup items!

There are more out there but this is my combo...

Oh and use Avast AV... My company owns SYMANTEC and it is a piece of SH##!!!!!

And Avast is free =]