View Poll Results: I have unknowingly been hijacked by Gator...
- 1114. You may not vote on this poll
I have run Spybot search and destroy or Adaware and did not find Gator on my system at all
I have run Spybot search and destroy or Adaware 1 time and did find Gator
I run Spybot search and destroy or Adaware frequently and rarely find Gator on my computer
I run Spybot search and destroy or Adaware frequently and find Gator almost everytime has infected my computer
Thread: Delete Gator
11-18-2002, 01:32 PM #31
Update on Ad-aware installation and initial run:
It found one register entry referencing Alexa - a program I can't remember but probably installed and uninstalled long ago.
It found a comet folder that I'd created to hold a .gif file of a pop-up window that warned me what was about to happen regarding the comet installation. I aborted that process but saved the pop-up for future reference.
It found a commonname folder in which I'd saved the web site of another process that was aborted when I discovered that it was going to install itself onto my computer from a remote server - a no no in my daily operations.
It found 32 cookies that I don't know or care about.
I had it delete the 32 cookies and 1 Alexa reg entry; rebooted and re-ran the program in just the drives needing checking and discover nothing.
It runs efficiently and fast with good log file documentation.
It doesn't save to my preferred, last "saved to" folder but to the C:\ drive. (I never save anything to or work from the C:\ drive but have my own briefcase located on another drive.)
The "Abort" button doesn't make clear whether that's to the current drive or to the entire process. I have more than a dozen drives and needed to abort some but was afraid the entire process would have to be begun anew after such an 'abort'.
There is no built-in link to or other reference to the various files/programs causing problems. It would have been nice to read something about "Alexa" before agreeing to remove the reg reference thereto from my computer. Similarly, Comet and Commonname discussions would be helpful - even if only at someone else's web site or forum.
All in all, it seems to be okay - my daily operations seem to preclude its need here except for those cookies which I don't think are that big of a deal.
11-18-2002, 01:35 PM #32
Where's the "I ran adware and it found hundreds of cookies that it called infections, but I'm not sure if this has anything to do with gator," question on the poll? In otherword, even though I've read this thread, I'm confused about what exactly this thread is about.
11-18-2002, 01:53 PM #33Is this "Comet Cursor" somehow related to this Gator thing, or is this a shortsight of the adware and spyware programs, or something else?
As to the cookie issue, most cookies are harmless, some like doubleclick,advertising,com and others are more nosey.
Benzden, I would love to get discussions rolling on other spy/theftware products. If anybody has any questions related to other products which may or not be spy/theftware you may start a new thread
It is best to use the product name as the title of the thread, this helps to get the post better rankings in Google, thus more responses and viewers.
Though I have added benzden and Enigma as moderators, I am working on category specific moderators for the SEO forum and will also look into a couple of people for this forum. I know some folks that would be great for these areas of AHFB and will be working on agreements with them.
11-18-2002, 03:22 PM #34
Try renaming the .dll to any.dll and anything.dll
You may be able to delete them then.
Yes, norton works with you.
Comet curses is a phone home spyware scum lot and it is better to remove it or lose your privacy.
11-18-2002, 06:08 PM #35
yea thx but it doesn't work. Says file can't be modified while windows is useing it.. I tried opening it in notepad and just messing up the codes hoping windows would let it go but it won't let u save it. it all boils down to a hidden folder in BMT/banners called "9689.3".. Ad-aware doesn't detect it I guess and u can't delete it. I tried turning off everything except Explorer but windows still exchanges with it somewhere.
If any programmers or wiz's in general know how to get rid of it lemme know..
I tried deleting the .dll files and when it went to recycle bin 1 turned into a folder that had a bunch of gator stuff. I was able to delete everything but a folder called 9689.3. it has a "GBD" file in it. I opened it in notepad and saw it was just a bunch of website logs encoded. I tried modifying it, but won't let me save it. still can't delete it. weird stuff..
11-18-2002, 07:27 PM #36
11-19-2002, 12:32 AM #37
I uninstalled "Comet Cursor" and then I ran Adware after rebooting. The uninstall removed all files.
I'd love to know what "phone home" spyware is.
11-19-2002, 01:40 AM #38
Yea no worries. I was finally able to delete the last of the gator program. I just hit empty recycle bin before Windows could fully load, and call the gator file. It worked.
11-22-2002, 05:20 PM #39
The new post shows a recent post as of today at 11:24 am but he innerds of the "Delete Gator" thread still shows Synthad1 of 11/18/02 as the last post - and there's no additonal page (of posts) indicated.
11-22-2002, 05:37 PM #40
You will notice that whenever there is a poll attached, a new vote pushes the topic back up.
Myself, I try to be selective to which posts I place polls on. When something is as important as Gator or Ezula I make a poll for the sole purpose of keeping the thread on the front page of ahfb2000. I could turn it off so votes do not push the topic up, but keeping the **** in front of peoples eyes is too important.
11-23-2002, 10:02 AM #41
In other words, ignoring the "Delete Gator" thread will allow more time to view the other threads - perhaps those with actual posts from visitors wanting help.
11-23-2002, 10:30 AM #42
11-23-2002, 12:59 PM #43
I agree Dave, informing people about internet vandalism is really important.
I'm a teacher and I haven't seen any kind of warning or information about this coming to teachers. It is so important for teachers to know because we teach the 16-year-olds critical viewing skills and one of the things you teach is about how much trust you give to information based on the source of information.
This toptext thing is like forgery of endorsement for the pages it dishonestly links you to.
11-23-2002, 10:08 PM #44
I usally come in thru www.ahfb2000.com/ Because the last 10 threads are displayed partially on the front page, and because code placed in the forums can affect the tables of the front page if placed within the very beginning of the post (whew). Coming in this way also lets me know if there is actually new text in the post.
I know it does interfere somewhat with the flow, and have taken that into consideration. The way I see it, as the issue loses its importance the thread and poll will naturally fade out. You have seen this with many of the "Who is your favorite band" polls.
Sometimes you have to research all the facts, weigh the pros and cons, put all your lifes learnings into a decision
...then draw straws.
11-29-2002, 03:41 AM #45
As a latecomer to the thread I think the following may be useful (sorry to repeat if the info is elsewhere and I missed it)...
If you find Gator or any other spyware on your machine and you didn't install it yourself, try going to the Tools button on your browser (IE) and select Internet Options.
Look at the Advanced tab and make sure both Install On Demand check boxes are unchecked.
Benzden's caution about messing with reg entries and using software to delete them are well founded.
I used to use Ontrack Fix It Utilities and now use Norton System Works for general software maintenace inc. reg cleaning. Both have built in safguards to prevent you deleting something you need.
Both work well but for preference I prefer Fix It. I only stopped using it when it was sold to a new company. I want to see if they mess it up as I can't see anyone doing as godd a job as Symantec.
If you can't delete files because they are Read Only, browse to the folder they are in and right click them. Select Properties and change from Read Only to Archive.
I'm not convinced Alexa is safe, Dave. I know a couple of versions ago I heard it can act like a keystroke logger even on secure pages. Alexa's usefulness generally is dubious too as the info it provides is wildly inaccurate in my experience.
Whatever your view of Alexa or other more nefarious spyware, one thing is for sure, it utilises the bandwidth you pay for and slows down your surfing.