anti spyware trick - Tilted Forum Project Discussion Community

Dilbert1234567 · 09-25-2004, 11:32 AM

Just something I discovered a while ago

When you are removing spy ware and the file is already loaded you get that annoying access is denied message. To stop any file from loading, take away its permissions.

Right click it, go to properties, then the security tab. remove all the users accounts from the list including system. The system can no longer open/load the file, unless the owner of the file (local admin) gives permissions back. Hence the system can not load the file when it boots. Reboot. After the system boots, give back permissions to the account that is running and delete the file, or better yet, leave it, it can’t be reinstalled over it.

09-25-2004, 11:38 AM

you coulda put this here...
http://www.tfproject.org/tfp/showthread.php?t=70402

phukraut · 09-25-2004, 08:48 PM

Good tip. Isn't this what Safe Mode is for though? Unless there is some nasty spyware that runs even in this mode...

sailor · 09-26-2004, 08:22 AM

Quote:

Originally Posted by phukraut

Good tip. Isn't this what Safe Mode is for though? Unless there is some nasty spyware that runs even in this mode...

Yeah, we always boot into safe mode if there is a machine that is pretty chock full of crap. Never had an access denied before...

Aerundel · 09-26-2004, 09:56 AM

Spybot S&D has an option to run immediately upon Windows loading. Gets rid of any spyware I've ever had - which hasn't been much besides tracking cookies lately, thanks to FF and KPF

Dilbert1234567 · 09-27-2004, 08:04 AM

the one i had could not be removed at start up, or in safe mode.

jmad · 09-27-2004, 10:44 AM

For some reason, when I right click on a spyware file and click on properties, it doesn't do anything. And I do get that stupid access denied message when I try to delete it. any ideas?

vanblah · 09-27-2004, 12:38 PM

Not sure if this will help but can you take ownership of the file?

Right Click the file
Select "Properties"
Select "Security"
Click "Advanced"
Select "Ownership"

Once you've taken ownership you should be able to set any kind of permissions on it you want.

jmad · 09-27-2004, 05:15 PM

for some reason I can't select properties. I right click the file, and click on properties, but nother happened. Anyone knokw how to fix this or what kind of software would be able to get rid of this crap?

Sleepyjack · 09-30-2004, 03:03 AM

I found this nice little program which will remove files before windows boots up. As, spyware often attahces itself to other windows system programs which run and you're not allowed to delete them. This was handy for me to remove a virus which was doing that.
It's free and easy to use.

http://www.snapfiles.com/get/moveonboot.html

bigcid420 · 09-30-2004, 09:05 AM

I have found in my 12 years of supporting PC's that these programs get ride of 90% of the spy out there aside from some evil browser hi jackers in witch case cws shredder works wonders. But i would recommend to you all try useing this program http://www.lavasoftusa.com/software/adaware/ along with HIjackthis works well.

JASON CROW

09-25-2004, 11:32 AM	#1 (permalink)
Dilbert1234567 Devils Cabana Boy Location: Central Coast CA	anti spyware trick Just something I discovered a while ago When you are removing spy ware and the file is already loaded you get that annoying access is denied message. To stop any file from loading, take away its permissions. Right click it, go to properties, then the security tab. remove all the users accounts from the list including system. The system can no longer open/load the file, unless the owner of the file (local admin) gives permissions back. Hence the system can not load the file when it boots. Reboot. After the system boots, give back permissions to the account that is running and delete the file, or better yet, leave it, it can’t be reinstalled over it. __________________ Donate Blood! "Love is not finding the perfect person, but learning to see an imperfect person perfectly." -Sam Keen

09-27-2004, 08:04 AM	#6 (permalink)
Dilbert1234567 Devils Cabana Boy Location: Central Coast CA	the one i had could not be removed at start up, or in safe mode. __________________ Donate Blood! "Love is not finding the perfect person, but learning to see an imperfect person perfectly." -Sam Keen

09-30-2004, 09:05 AM	#11 (permalink)
bigcid420 Upright	Ad-Aware/Hi-Jack this I have found in my 12 years of supporting PC's that these programs get ride of 90% of the spy out there aside from some evil browser hi jackers in witch case cws shredder works wonders. But i would recommend to you all try useing this program http://www.lavasoftusa.com/software/adaware/ along with HIjackthis works well. JASON CROW

09-25-2004, 11:38 AM	#2 (permalink)
Xepidemic Guest	you coulda put this here... http://www.tfproject.org/tfp/showthread.php?t=70402

09-25-2004, 08:48 PM	#3 (permalink)
phukraut Addict	Good tip. Isn't this what Safe Mode is for though? Unless there is some nasty spyware that runs even in this mode...

09-26-2004, 09:56 AM	#5 (permalink)
Aerundel Upright	Spybot S&D has an option to run immediately upon Windows loading. Gets rid of any spyware I've ever had - which hasn't been much besides tracking cookies lately, thanks to FF and KPF

09-27-2004, 10:44 AM	#7 (permalink)
jmad Tilted Location: Wisconsin, eh?	For some reason, when I right click on a spyware file and click on properties, it doesn't do anything. And I do get that stupid access denied message when I try to delete it. any ideas?

09-27-2004, 12:38 PM	#8 (permalink)
vanblah Junkie	Not sure if this will help but can you take ownership of the file? Right Click the file Select "Properties" Select "Security" Click "Advanced" Select "Ownership" Once you've taken ownership you should be able to set any kind of permissions on it you want.

09-27-2004, 05:15 PM	#9 (permalink)
jmad Tilted Location: Wisconsin, eh?	for some reason I can't select properties. I right click the file, and click on properties, but nother happened. Anyone knokw how to fix this or what kind of software would be able to get rid of this crap?

09-30-2004, 03:03 AM	#10 (permalink)
Sleepyjack Fast'n'Bulbous Location: Australia, Perth	I found this nice little program which will remove files before windows boots up. As, spyware often attahces itself to other windows system programs which run and you're not allowed to delete them. This was handy for me to remove a virus which was doing that. It's free and easy to use. http://www.snapfiles.com/get/moveonboot.html