Spybot s&d warning!

[DEATH_INC.]

Anyone running spybot s&d be warned, don't let it delete 'hellzlittlespy' from your system.....it's needed to log on to windows and you'll not be able to get into your system once you log off/shut down.....I'm still tying to get a repair that works on mine (I'm on draco's at the mo...). It seems there is a bug in their latest upgrade.....:eek:

[Elysium]

Official web site says nothing.

[Usarka]

Be careful when it deletes hamsterductapesex.dll too, it's closely tied in with some essential operating components.

[Headbanger]

hellzlittlespy is a keylogger is it not?

Hardly the fault of Spybot if your PC is infested with nasty crap that reconfigures your system files.

[cs363]

hellzlittlespy is a keylogger is it not?

Hardly the fault of Spybot if your PC is infested with nasty crap that reconfigures your system files.


Yes it is a keylogger/trojan, but from what I understand SB is reporting a false positive and mistakenly removing a windows registry key and that is causing this issue. There's some info here: http://forums.scotsnewsletter.com/index.php?showtopic=21131 also Googling 'hellzlittlespy' will reveal the extent of this issue with SB and the number of people experiencing it...Seems like there are a few fixes if you have the time and knowledge to go that route, or...


If you have the original Windows disc I'd try and do a repair install. If you don't have anything critical on your PC you could just reformat your drive and do a clean install if all else fails. (I'm presuming you don't have a back up image of your hard drive?)

[JMemonic]

?? just read the link and it refers to an older versions on spybot, I am lost as to where the problem is.

[Headbanger]

I goggled it (The amount of hits from Google are tiny), That's how I knew it was a keylogger:shit:, I would assume (yeah shoot me, I make assumptions) That just like the other billion such incidents with other items of malicious code, The key logger has integrated itself into the registry and boot files in such a way that removing it breaks the system.

Nothing new there, Nortons made billions from the exact same practise.

And its slightly different series of events then Spybot falsly identifying ajnd removing a required system file, But anything is possible.

[NighthawkNZ]

http://www.spywaredb.com/remove-hellz-little-spy/

[DEATH_INC.]

hellzlittlespy is a keylogger is it not?

Hardly the fault of Spybot if your PC is infested with nasty crap that reconfigures your system files.

I'm not blaming spybot, just warning othes so they don't have to go through the same shit as me :bash:

[DEATH_INC.]

(I'm presuming you don't have a back up image of your hard drive?)
Um....no....who does?????

[DEATH_INC.]

?? just read the link and it refers to an older versions on spybot, I am lost as to where the problem is.
http://forums.spybot.info/showthread.php?t=30030

[cs363]

Um....no....who does?????

:rofl: yep, that's the trouble...mind you, a few issues like this and you can start to see the benefits.....
Have you tried to do a repair install? Worth a crack if you haven't tried it as you'll keep all your files (unless it all goes horribly wrong etc...though this is rare)

[enigma51]

Um....no....who does?????

Death ignore these know it all wankers

if you want some help send me a pm

[Headbanger]

Death ignore these know it all wankers

if you want some help send me a pm

No need for that crap, what are you 2 years old or something?

[Rhino]

This problem with a false positive for "hellzlittlespy" occured in July 2008 for those Spybot users who did not upgrade their version from 1.3. The removal deleted a registry setting referred to during the boot up procedure.

Check your version by opening Spybot and going to Help>About on the menu bar. The latest version is 1.6. If you are still running 1.3, upgrade NOW to avoid more false positives.

If anyone with Spybot 1.5.2 onwards gets a positive for this, I would suggest checking with the forums at the Spybot website before attempting to remove the keylogger. Search on Google and you can find a number of removal instructions for the real "hellzlittlespy."

Always keep your anti-virus and anti-spyware products up to date.

[YellowDog]

Um....no....who does?????
Mate, try starting in Safe mode and do a system restore to before it got buggered up. OR put in your origninal OS CD (XP I presume) and run the Fixboot utility.

Good luck!

[Max Preload]

Um....no....who does?????

I do. Every week a full ghost of the bootable partition to a 1TB external drive, daily synchronising between my work & home PCs using my 16GB USB drive & SYNCBACK SE and a twice weekly backup of other partitions to the 1TB. :banana:

[Ixion]

I do an image of the lap top HD to a second HD mounted in a caddy which goes in the DVD drive bay (IBM T series). That's actually through the Linux partition cos I can mount the Windoze partition under Linux. I can't say I do it EVERY week. But a couple of times a month. Or more if something's changed. Beauty of that is I can load and read it on anything, it doesn't rely on the geometry remaining the same.

[mister.koz]

I back up all my important data in a few locations, i found that when i did need and use ghost images i ended up deciding against using it so i could set it up better.

Quote:
There's 2 types of people, those who back up and those who haven't lost anything.

[Winston001]

All very interesting but I'm still trying to find "hamsterductapesex.dll." Looks like Bill Gates forgot to put it in my OS. :bleh:


Incidentally as well as Spybot I also run Windows Advanced System Care - nice utility for all sorts of cleaning.

[mister.koz]

All very interesting but I'm still trying to find "hamsterductapesex.dll." Looks like Bill Gates forgot to put it in my OS. :bleh:


Incidentally as well as Spybot I also run Windows Advanceed System Care - nice utility for all sorts of cleaning.

I would advise not to use "Windows Advanceed System Care" primarily as programs with silly names are normally not good. Its not an exact science but i have been working with this type of computing for some time.

I use:

Mcafe Stinger
Spybot s&d
Adaware se
Malwarebytes Anti-malware
Symantec antivirus corporate edition


And apart from irish viruses i have no troubles at all, but then i also use fire fox and never Internet explorer, I use a linux firewall (gentoo/iptables) and i don't click on porn banners or allow websites to install anything.

(ps. irish virus means you break shit yourself)

[Winston001]

I would advise not to use "Windows Advanceed System Care" primarily as programs with silly names are normally not good. Its not an exact science but i have been working with this type of computing for some time.

I use:

Mcafe Stinger
Spybot s&d
Adaware se
Malwarebytes Anti-malware
Symantec antivirus corporate edition


And apart from irish viruses i have no troubles at all, but then i also use fire fox and never Internet explorer, I use a linux firewall (gentoo/iptables) and i don't click on porn banners or allow websites to install anything.

(ps. irish virus means you break shit yourself)

Sensible advice and when I originally ran Advanced Windows Care 2 years ago, I was a bit nervous. However it immediately fixed a problem which other utilities couldn't. It sets a Restore Point and a Registry Restore when first downloaded.

But you are dead right - silly names should be avoided.

[imne1]

do a clean instal of windows. that is the best solution. consider installing a program called deep freeze - which will save the whole system as it is. no need for anti anything, just reboot and its all back to normal.

[sinfull]

the hun . com is really good for spyware ! there you will find links to all sorts of sites, that will download malicious adware and trojans on to your system !
It's an unbelievable challenge to stay ahead of them !

Reboot is my friend !
Never paid for anti virus or spy killers !
Using Avast free virus at the mo and it seems to be doing its job picking up a couple of trojans in the last few weeks and blocking them !
Have Malwarebytes but dont seem to be picking up anything lately so might delete it and only download it when i'm hunting a trojan thats got loose in my system !
Run adaware daily and (depending where i been) i usually pick up between 10 and 50 spyware !~ Even your so called clean sites have spyware !

Had a call last night from a mate who (against my advice, cause he has no idea) bought a new laptop with vista (yuck) screaming for help cause he's all frozen up already after 2 weeks lol

[Hoon]

I don't bother with any of that crap, it just slows down my computer. As long as you know what to click on and what not to you are pretty safe from viruses. It may not be 100% foolproof but neither is the best AV software.

[mister.koz]

I don't bother with any of that crap, it just slows down my computer. As long as you know what to click on and what not to you are pretty safe from viruses. It may not be 100% foolproof but neither is the best AV software.

Dude honestly thats like saying you don't need a helmet and leathers to ride a bike, just never crash.

I frequent security portals and hacking sites looking for new threats to my servers and the servers at work, without anti virus i wouldn't get far at all.

The right anti virus and the right precautions can save you all sorts of trouble. I run Linux on my main machine so its not susceptible to that sort of harm but 99% of people just want a computer to protect itself.

[DEATH_INC.]

This problem with a false positive for "hellzlittlespy" occured in July 2008 for those Spybot users who did not upgrade their version from 1.3. The removal deleted a registry setting referred to during the boot up procedure.

Check your version by opening Spybot and going to Help>About on the menu bar. The latest version is 1.6. If you are still running 1.3, upgrade NOW to avoid more false positives.

If anyone with Spybot 1.5.2 onwards gets a positive for this, I would suggest checking with the forums at the Spybot website before attempting to remove the keylogger. Search on Google and you can find a number of removal instructions for the real "hellzlittlespy."

Always keep your anti-virus and anti-spyware products up to date.
Strange that, I just did the upgrade before it all went wrong.....

[DEATH_INC.]

I do. Every week a full ghost of the bootable partition to a 1TB external drive, daily synchronising between my work & home PCs using my 16GB USB drive & SYNCBACK SE and a twice weekly backup of other partitions to the 1TB. :banana:
Um, do you speak english??? :laugh:

[mister.koz]

Strange that, I just did the upgrade before it all went wrong.....

Its a good idea to do a registry backup before you run spybot and other programs like it, i am pretty sure you can do it in spybot but otherwise use the "export" feature in the regedit program, can give you a step by step if you don't know what i mean.

[DEATH_INC.]

The problem is that ya can't get back into windows at all, not in safe mode either.....we're working on it, there's a few cures out there, I just wanna have a go at fixing it myself......then I'll ask for some help after I stuff it up :blink:

[Headbanger]

If its just a single system file you can just copy it into the required place by hooking the HD into another pc, takes about 4 minutes and 20 seconds.

Provided your research has identified which file or files that keylogger corrupts on installation and removal.

[mister.koz]

If its just a single system file you can just copy it into the required place by hooking the HD into another pc, takes about 4 minutes and 20 seconds.

Provided your research has identified which file or files that keylogger corrupts on installation and removal.

Or you could do a recovery install from the windows setup disk.

Connecting the hard drive to an external caddy is only helpful if you know what you are doing, otherwise its just confusing.

[Headbanger]

Or or or, There are multiple ways of approaching the issue, Personally I consider installing over the top of an existing install to be a garbage method.

And it takes the same amount of time to bung a hard drive onto an IDE cable as it does to install it into a caddy, so I personally wouldn't bother with a caddy.

Either way, Its pretty obvious the thread starter has scant idea what they are doing, Though I personally don't see that as good reason to recommend the worst solution.

Actually, If I were to be perfectly honest I'd suggest they refrain from working on their PC and get someone in who can. There is a lot to be said for stopping before it gets worse. Though if they paid someone whose capabilities consisted of inserting the XP cd then that perhaps isn't a great idea either.

[GIXser]

Mate .. just get ya floppy, insert it in the cpu. then run defrag... reboot, upgrade the ram,...run boot,exe. check all the USB's and make sure the monitor is turned off at this stage.. and voila... easy peasy

[scracha]

The problem is that ya can't get back into windows at all, not in safe mode either.....we're working on it, there's a few cures out there, I just wanna have a go at fixing it myself......then I'll ask for some help after I stuff it up :blink:

Good for you for fixing it yourself.

Well I earn a living doing this (and that!) and sure, there's always uber-geeks who's ask you to send in hijackthis logs and fanny about unregistering dll's etc etc...BUT..... These days, when you're charging peeps by the hour then after a quick scan, check of registry, fixmbr... whatever and check for obvious fuckups (around 20 mins) I'm quicker doing a backup and then recovery install. Regardless of the nasty trojans and rootkits around, most peeps windows installs are often completely borked after a few years with all the $hit they've installed so I'd say I'm doing this around 50% of the time.

If you can't be arsed moving hard drives around then a UBCD4Win disk is an absolute godsend. All the antivirus in the world doesn't stop windows shitting itself from time to time (although my main pc has been ok for the past 6 years) and probably the best idea for most peeps is to use dixml to take a complete system snapshot, preferably to an external drive but even doing it to the same drive is better than nothing. Dixml is free and you can even keep using the PC whilst it's doing the backup.

Vista....$hit I must be the only guy out there who likes it. I rarely get vista machines back in with problems (and I've been selling PC's with it since it came out) compared to XP. Most of the problems are from peeps running it on $hit hardware (1GB ram, celeron), pre service pack 1 or they've turned off user account control.

[scracha]

Mate, try starting in Safe mode and do a system restore to before it got buggered up.


As I've said before....nooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooooooo

Don't use system restore these days. There's more of a chance of it fucking things up worse than fixing it.

[DEATH_INC.]

Back up and running...did have to get a mate to help though. The instructions off the web weren't quite right....
Part of the problem is when I upgraded spybot it didn't.....it was still 1.3, tried it a couple of times, had to remove 1.3 and re-install 1.6 to get it to work.

[SARGE]

Um....no....who does?????

I take an image of my laptop and my desktop once a month on outboard hard drives..250 gb drives are cheap enough now ya really cant afford not to.

also .. real easy little script to use for manual restore points..

open notepad


Set IRP = getobject("winmgmts:\\.\root\default:Systemrestore")

MYRP = IRP.createrestorepoint ("My Restore Point", 0, 100)


save as RESTORE POINT .vbs


right click on it and OPEN IN COMMAND PROMPT



done..

do that manually once a week or before installing or changing anything

[Forest]

I would advise not to use "Windows Advanceed System Care" primarily as programs with silly names are normally not good. Its not an exact science but i have been working with this type of computing for some time.

I use:

Mcafe Stinger
Spybot s&d
Adaware se
Malwarebytes Anti-malware
Symantec antivirus corporate edition


And apart from irish viruses i have no troubles at all, but then i also use fire fox and never Internet explorer, I use a linux firewall (gentoo/iptables) and i don't click on porn banners or allow websites to install anything.

(ps. irish virus means you break shit yourself)

Or you could just buy a Mac.

The Mac platform has no known viruses or self-replicating trojans.

[mowgli]

Or you could just buy a Mac.

The Mac platform has no known viruses or self-replicating trojans.

The ratio of viruses to useful software on a Mac is about the same as on Windoze :bleh:

[The Stranger]

Mate .. just get ya floppy, insert it in the cpu. then run defrag... reboot, upgrade the ram,...run boot,exe. check all the USB's and make sure the monitor is turned off at this stage.. and voila... easy peasy

Best advice so far in this thread!

[Katman]

No need for that crap, what are you 2 years old or something?

Hey, no need for that.

Please think of the 2 year olds.

[cs363]

Vista....$hit I must be the only guy out there who likes it. I rarely get vista machines back in with problems (and I've been selling PC's with it since it came out) compared to XP. Most of the problems are from peeps running it on $hit hardware (1GB ram, celeron), pre service pack 1 or they've turned off user account control.


.... Not quite! I've had Vista (x64) on my new PC which I got towards the end of last year and I really can't understand what all the fuss is about. I've found it to be very stable and apart from a few issues with finding drivers etc right at the beginning (a few manufacturers were slow to come up with Vista compatible drivers) I've had no problems at all and I haven't turned any of the fancy features off. Runs all my games and other applications with no problems at all, even MS Flight Simulator on real high display settings with no hassles.
But I think you are spot on with the comment about running Vista on shit hardware as that has been my experience with any one that does have problems with it.

As far as back ups, I just took an image of the hard drive once I had everything set up with all the updates etc using Norton Ghost and I just keep that on a spare hard drive, if anything does happen it's simply a matter of swapping in the new drive and I'm up and running again.

[Winston001]

But isn't the objection to Vista is that it is such a resource hog? It gets sold with pcs having only 1GB of RAM and is slow as a wet week. Also Vista is security paranoid and has heaps of popups which kinda startle the average user.

All very well for those of us with the interest and enthusiasm to learn about computers but most folk simply don't. In fact the major let-down of the computer age is that computers appear to be unreliable, endlessly complicated, and completely unpredictable.

Ok, thats not my personal view but it certainly is what most people I talk to think. They view the computer as a tool: a fancy type-writer-sort-of TV so why does the thing slow down, fail to run programs, have fatal errors etc etc.......

[Winston001]

Just to expand on the above, the complexity of computers and computing systems is what allowed Michael Swan to steal $17 million from the Otago Health Board. He was the IT manager and every time someone questioned the huge bills, he explained they were for software licensing and systems backups. Non-computing people didn't understand that and just shrugged. Even auditing found nothing wrong. :no:

[Pixie]

I take an image of my laptop and my desktop once a month on outboard hard drives..250 gb drives are cheap enough now ya really cant afford not to.

also .. real easy little script to use for manual restore points..

open notepad




save as RESTORE POINT .vbs


right click on it and OPEN IN COMMAND PROMPT








done..

do that manually once a week or before installing or changing anything

Or use ERUNT