this morning i had scumware invade my computer through email. the invading program is: duolaimi.net/d.asp? i did a google search and downloaded ad-aware which was suppose to get rid of the scumware, it did not.
the scumware has taken over my homepage and disabled the tools ability to change the homepage and who knows what else. before today i had never ever heard of scumware, now yuck!
What is ‘scumware’? A virus? AdAware isn’t an antiviral program. It only gets rid of commerical spyware. Get Norton Antivirus. That should work. Or do a google search for antivirus programs.
scumware is not a virus, it is an ugly form of spam.
here is a seached definition:
scumware refers to programs that overlay text links from advertisers on your web site without your permission.
Never heard of it. Don’t any of the sites your search found have any info on removing it?
I still think Norton Antivirus would be a good thing to try.
Scumware is the name emerging for the class of unwanted junk which typically operates as a “companion” to your browser, adding links to your web pages not placed there by the website, typically pointing back to the sites of paid advertisers. Stuff like the “TopText” program now being installed by KaZaa. AdAware is the right class of application for what the OP wants, but there is currently an “arms race” going on between the scumware producers and people like them.
And as far as I know, the major antivirus makers aren’t touching things like this because they are an intended part of the install of programs like KaZaa, so Norton isn’t going to consider it a “virus” and update their DB to include it in the stuff they look for. By installing the (probably) useful application whose authors probably got a kickback from the scumware vendor, you “voluntarily” added it to your system.
Kill the browser, then reinstall it again.
Hmm, I’ve always found Ad-aware pretty good it removing it all, perhaps it’s worth emailing them to ask if an update is coming?
If not, try http://www.scumware.com/. This place has a lot of information on scumware. They might be able to point you in the right direction.
Thank you biker for starting this thread. You’ve motivated me to get that software and rid myself of some annoying add-ons to IE.
While I was downloading ad-aware from cNet I saw that they had RefUpdate which “Makes sure you always have the most recent reference file for Ad-aware installed on your system.”
Perhaps that’s why?
Windows allows for other applications to “attach” themselves to IE (and therefore avoid most firewalls) by way of the registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
I can think of no legitimate reason for any entries under this key.
Maybe that’s where it’s hiding. If so, deleting the key should disable it.
[sub]Remember, editing the registry will immediately cause the end of the universe as we know it.[/sub]
not only do i have this insane scumware problem but i had also downloaded ie6 onto Me, which turned my computer into a doorstop. on top of that ie6 can not be uninstalled, it changes your registry.
i found scumware.com and it was very informative but they only cure two forms of scumware and neither one is the one i have. apparently i have a brand new version, i feel so special.
at the moment i am of the opinion with all these situations, reformatting is my only solution. will i have to partition the hard drive to get rid of the scumware?
Hang on, don’t format yet.
It has disabled your tool’s ability to change the homepage? Which tools do you use? What has it changed your homepage too? Have you tried contacting your ISP or whoever hosts your webspace?
The trick is to find out what the hell they’ve changed and who the best people are to talk to about sorting it out.
Failing that, you could bombard that duolaimi.net place with emails demanding they tell you how to remove it… or if it is adding advertising to your page, contact the companies it is advertising for and threaten to cause a fuss.
Finally, you could always send a friendly mail to scumware.com or ad-aware, explain the problem, and ask for advice. The worst they can do is ignore you, and the best they can do is get rid of it for you.
first thing i did was call my isp, they were the ones that informed me it was scumware. they are working on the problem but now closed for the weekend.
on ie6 you go to tools/options and you can select the homepage you desire. the scumware has disabled that selection process.
i have also sent emails concerning the problem to scumware.com and ad-aware. waiting on a response.
i just tried re-downloading ie6 and that did not help.
Ahhh, I see what you’re saying now. I thought it had changed a webpage you ran yourself.
Ok, well your ISP should be able to help, but if you’re passed hope you could try changing your start page in the registry.
Go to start/run, then type in “regedit” and return.
Scroll down to HKEY_CURRENT_USER/Software/Microsoft/Internet Explorer/Main
The start page setting can be defined under there. (This is for Win98, by the way, but ME should be similar)
I warn you, be very careful when changing the registry etc. etc.
Anyway, hope it helps!
it worked, it worked, it worked, thank you , thank you , thank you.
i was able to eliminate the scumware from the url line and return the home page to my original selection, cnn.com. however, the ability to change it under tools/options is still disabled. any suggestions there?
It’s worrying me a bit that you say you got this though email. This could be a symptom of a virus infection, so I strongly suggest you scan your computer at this stage. I believe there used to be a free online virus checker at http://www.mcafee.com.
If it is a virus, they should be able to offer a fix program or instructions on how to manually get things back to normal.
do not believe this is a virus. i have norton anti-virus on my email. it did not come up in a virus check.
what the scumware does is it makes their web page my home page. then it disabled my ability to change that under tools/options.
all the scumware listed on scumwear.com are legitimate businesses using spy systems they install on your computer. this version i received, must be something new. sort of a cross between a virus and scumware.
Ok, well I’ve never disabled this feature myself, but I figure it’s probably something to do with policies.
This link will hopefully help you sort it out. Notice that the restriction could have been made in either HKEY_CURRENY_USER or HKEY_LOCAL_MACHINE.
Again, remember to be very careful whenever changing the registry.
Also, do make sure your Norton AV version is up to date.
Good luck!
scumware is not a virus in that it does not replicate and infect other machines.
>> I can think of no legitimate reason for any entries under this key
I checked my registry and there’s a couple of keys there which seem to belong to Acrobat and do not seem too suspicious.
It’s also possible to get this junk by accidentally downloading an ActiveX component that claimed it was a “download helper” or some other nonsense. These things can blow right past your firewalls and spam you to death if you grant them permission to install.
Quixotix Control Manager (freeware) will let you manage all your ActiveX controls and add/remove them.