adaware and cydoor

[Shamrock]

I ran adaware and it found 5 cydoor in my registry.Cydoor key:HKEY_USERS\.default\software\cydoor\
Cydoor key:HKEY_USERS\.default\software\cydoor services\
Cydoor key:HKEY_CURRENT_USER\software\cydoor\
Cydoor key:HKEY_LOCAL_MACHINE\software\cydoor\
Cydoor key:HKEY_CURRENT_USER\software\cydoor services\

Should I let adaware delete? How do I know what programs may be associated with them?

 

[TonyKlein]

Here are a couple of sites of interest:

<A HREF="http://www.cexx.org./">Counterexploitation [cexx.org]</A>
<A HREF="http://www.spychecker.com/">Spychecker </A>
<A HREF="http://www.infoforce.qc.ca/spyware/enknownlistfrm.html">SISL -- List of Known Spyware Infested Software</A>
<A HREF="http://accs-net.com/smallfish/">Privacy Power!</A>

You might well find the answer to your question there as well.

And yes, do let Ad-Aware delete all references to Cydoor.

Cheers,

 

[Shamrock]

Yes, I know that cydoor is bad. I just downloaded adaware and this was the first time I've used it.
Question... Seems like I read that you should manually delete the host program before you have adaware delete. If you don't know what the host program is then how do you delete?

 

[TonyKlein]

Well, some programs, notably Kazaa and Go'Zilla, will no longer work if you delete the spyware component. In that case it's a good idea to uninstall the entire program, and look for alternatives that don't include spyware.

Many other programs, however, continue to function quite happily after removing the accompanying spyware, so I wouldn't worry too much about that.

Greetz,

 

[SavvyLady]

You might better read the log in Ad-Aware & see if it indicates where its located.


Savvy

 

[Shamrock]

So, like these cydoor do I do a back up before they are deleted or does that defeat the purpose of deletion? Also, if I don't know what program they come from then I may not discover that til someday down the road I click on some program and it doesn't work? Then what... just delete that program then?

 

[TonyKlein]

Hi Shamrock,

You don't need to backup Cydoor, and deleting it is very very unlikely to interfere with any program you've got installed. I've cleaned many machines with Ad-Aware without any adverse effects, and I can tell you, that wat you have is pretty mild...
I've seen machines with more than 150 spyware keys, cookies and files from 8 or more different spyware programs...

If by any chance you'd even 'disable' a program by installing its spyware component, just uninstall it and replace it by a 'cleaner' alternative, or, if you really can't do without it, just reinstall it on top of itself, and it'll work again.

Good luck,

 

[Shamrock]

Thank you Tony... I am going to remove the cydoor now. I have had 4 things sitting in my recycle bin left over from cydoor when I unchecked it from start up... they are an adcache folder, cd_clint.dll, cd_load.exe, and cd_swf.dll I am going to just 'finish' deleting them also.

I read in the adaware manual that there is an adwatch part to the program also but I can't find it. I'm wondering if others use that part of adaware or not?

 

[TonyKlein]

Hi Shamrock,

What I would do is uncheck Cydoor/cd_clint.dll or cdload.exe in Msconfig startup, reboot, and then run Adaware and remove everything.

If you still have the Adcache folder left afterwards, just delete it.

I don't use Adwatch myself, firstly because I don't want too many progs at startup, and secondly because I do check my startup locations regularly anyway.

Cheers,

 

[Shamrock]

I already had unchecked cydoor in my start-up, then the files I mentioned last reply I had left in my recycle bin... just in case. So I can let run adaware and let it get rid of the cydoor it found and these I have in recycle I can just delete permanently from recycle bin, right?

 

[TonyKlein]

Absolutely!

Cheers,

 

[hewee]

Do a search with find on the date that adcache folder, cd_clint.dll, cd_load.exe, and cd_swf.dll was installed and maybe you will find what else was install at that date and time.

 

[Shamrock]

hewee... I think it might have been a free video, voice chat program.

 

[hewee]

You could go an look at http://www.cydoor.com/Cydoor/Network/NetworkDownloads.htm to see if what is here is something you got.

 

[Shamrock]

hewee.. I didn't see anything listed at that site but I saw that I had downloaded a chat program the same day the cydoor stuff showed up so it probably was that... if so, doesn't matter cause I don't use that program anymore which brings up another question... better to uninstall old programs or leave alone. I know there are mixed opinions about that. For now, I will leave well enough alone since I seem to have got rid of all the spyware