Can Zedo be removed?
 

I've had ActiveX, DirectX and Trojan problems recently.
I reinstalled XP, ActiveX, DirectX, Patches, Zone Alarm, and AVG Antivirus.

I got all but the ActiveX resolved. Now I picked up Zedo.

Evertime I close Explorer, It opens a Zedo Page.

I'm running XP.

I've scanned with:

Spybot, Adaware, Webroot, Bitdefender, Bazooka, CCleaner, ASquared, Ewido,
and Trojan Remover.

Nothing Detects anything Zedo. Or anything at all for that matter.

Can Zedo be removed? How?

Yes it can be removed, First block zedo.biz and zedo.com in your Internet Explorer you can do that by:
IE -> Tools -> Internet Options -> Privacy -> Sites
Type zedo.com in the Address of the website and Block.

Download this utility HijackThis run and post the log file here so that we can find out what other malware is present in your computer.

Finally to remove the zedo tracking cookie download ewido anti-malware (two week trial version) install and run the ewido.

HJT File
 

I've never used this program before. Hopefully, this is what you wanted to see. I got an error running it, but this is what listed out.

Logfile of HijackThis v1.99.1
Scan saved at 3:04:41 PM, on 4/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe ...

Your log file looks good to me, no traces of zedo or any other spyware, I think ewido took care of it.

Zedo is still here
 

I dont know where zedo hides but it popped up while I opened this window.....


help...

Since zedo is tracking cookie, to remedy download and install CCleaner

zedo back
 

ccleaner has been used by me for over a year.
]
it doesnt find and remove zedo

How did you remove it in the end???
 

Somehow i picked up this Zedo "bug" despite using McAafee and AVG Anti-Spyware :(

These just will not get rid of this annoying bug

So please how should i rid my pc of this Zedo thing all together please?

Zedo is an adserver program that is set up as a service to pop up ads on your screen. Since it is a service type program most spyware/malware programs are fooled into believing that it is purposely installed and as such..they will not uninstall it.

This fix contains a Registry edit and if done wrong can cause harm to your computer!

How to Remove Zedo or Powered by Zedo Ads

1) Boot into Safe Mode
2) Click on Start, Search, and choose All Files and Folders
3) In the all or part of file name box, type the following

core.sys

4) In the Look In box, choose local hard drives and click Search
5) When core.sys is found in the c:\windows\system32\drivers directory,
right-click on it and choose Delete
6) Repeat steps 2-5 for the file

core.cache.dsk

7) Close the Search box
8) Click on Start, Run and type REGEDIT and press Enter
9) Click on the Plus sign (+) next to HKEY_LOCAL_MACHINE
10) Click the plus next to SYSTEM
11) Click the plus next to CurrentControlSet
12) Click the plus next to Services
13) Find the folder called CORE and right-click on it and choose Delete


*** WARNING *** If the folder CORE does not exist, dont do anything

14) Close the Registry Editor by clicking on the X in the right-hand
corner of the window

15) Reboot your computer in Normal mode
16) Once the computer is rebooted, Run all your anti-adware/spyware utilities
Use the registry cleaner from Ccleaner or your own personal registry
cleaner to clean any remnants from your system

CCleaner - Download

Followed those instructions to the letter m8, only folder it found was core.cache.dsk, duly deleted that. Went into registry and CORE folder wasn't there. Re-booted and scanned with both McAfee and Kaspersky, they both find and remove stuff BUT NOT ZEDO. It still keeps popping up despite all my attempts at ridding my pc of this :confused:

Even tried Webroot Spybot and it duly finds Zedo and says it will try and remove after reboot but then it doesn't! It is still there :confused:

Am i going to have to a reformat and Windows reinstall to finally get rid of this Zedo rubbish??

It could be possible that it is hiding in system restore!
start > R click My Computer >properties > system restore tab > check the turn off system restore box and ok out!

Once done retry your anti-spyware/malware programs....if still no good then you must look at the possibility that it is hiding itself under a different name within the services.

start >run and type

services.msc

click ok

very carefully run through each item listed to see if you can find something related to the zedo crap......compare with what your programs are showing it to be. then stop the service and then it can be deleted! Be sure of what you are deleting though or you might have to reinstall some programs.

Trendmicro has a very good and safe online scanner that might be able to remove it from your system....your system restore needs to be off..... go there and run the free scanner!

Trend Micro HouseCall - Free Online Virus and Spyware Scan - Trend Micro USA

help
 

can anyone help me with this trojan thing that has been found on my laptop, im not good with computers so patience is appreciated..lol. my son played on a game site and since then my mcafee scan thing has shown i have a trogan horse.. as im not computer literate it woud be very helpful if someone would be able to help.. the file name is iwingameshookIE.dll .. i tried to remove it but it wouldnt .. i tried to quarantine it but it wouldnt.. i tried a system restore and that didnt work.. im assuming its attached itself to my internet explorer but im stuck now.. any help would be appreciated

First off.

Please refrain from using someone elses thread to post your problems...Start your own thread and that way all can see and learn from it. This is hidden inside another post.

I will ask the moderators/admin to move it to its own spot.

Try to locate the iwingames or any variant of this in your add/remove programs in the control panel. If there uninstall it.

If you can not find it there then you must navigate to the folder and try to delete the folder..

( actual navigation is C:\Program Files\iWin Games\iWinGamesHookIE.dll )


start > R click "my computer" and choose explore

R click "C" drive or local drive (how ever it is listed in your computer).

click on programs and look for the Iwingames folder and try to delete it. if you can delete it then run all your antispyware programs to clean up the garbage that is left.

If you can't delete it then you must re start your computer and enter safe mode and delete it from there.

reboot the computer and instantly toggle the F8 key till it comes up with the start-up page and choose to boot to safe mode, once windows starts in safe mode re navigate back to

C:\Program Files\iWin Games\iWinGamesHookIE.dll and then delete the folder and all its contents. then use the anti-spyware/malware tools to get rid of the rest of the stuff!

report back on the outcome!

Ridding yourself of Zedo
 

I know this may sound like making a deal with the Devil but the easiest way to rid yourself of Zedo - in addition to turning off Javascript or regulating it, is to go to Zedo's website and choose their 'Opt Out" function. You have to do this regularly and it doesn't cover some pop under ads...but it puts a cookie on your computer to stop some Zedo crap

The link is : ZEDO Ad Serving : Optout


If you're using Firefox as your browser you can find an excellent -albeit slightly tedious - plug in to give you complete control over java scripts on every site you visit. I think it's called Scriptblocker, but if you search for add ons you'll find it.

Hopefully that's of some help.

Or another way of doing it is to use a advert blocking application like Ad Muncher, with this string in the new filters section *.zedo.com/* and block the url in the filter category it will stop any popup.

Ad Muncher put a stop to any advert, no more of those drive by infections from clicking on adverts. These are the stats from my computer from the last 2 years...

Ad Muncher Usage Statistics for v4.72 Beta Build 30295/1901
Adverts removed by Ad Muncher: 1,432,039
Approximate bandwidth saved: 11,187 MB
Counter started: March 8, 2006

Ad Muncher - The Ultimate Ad Blocker

fighting add popunders like zedo
 

What I do, is send them an invoice - I bill them for posting advertisements on my desktop. Then, when it happens again, bill them again. Also, bill them for removing the add. The idea is that someday, some of us get together, with a lawyer, and sue them for using our desktops without paying us - when they know full well (because of the invoices) that's it's no free.

Consider your deskto a miniature billboard - and billboards charge money.

So can we.

So, I typically bill $300 per add. I make a copy of the add. And I state that I expect payment in 30 days. And I state that I charge $100 per day late fees. Just for fun, I charge $5 for removal of the add.

That is all and good. The problem is that by overly pricing the billing it will be construed as a joke and not nor ever will be taken seriously! had you billed and acted accordingly then you could file suit in small claims and force the issue to a higher court that has jurisdiction.

I disagree. They know the terms. If they don't like them, they can stop posting there adds on my desktop. That's the way any business works. It's no joke either. I'm keeping all the evidence. Every invoice. Every email. Every add they post. How much I charge for them using my desktop is my choice. Them continuing to use my desktop is tacit approval of my rates. Or they're trespassing. Either way, I've got them.:icon_mrgreen:

What a load of bullshit...

Right..... you against an army of legal experts....like someone representing himself in court has a fool for a client.

I bet that they can prove faster that you agreed to downloading them through some obscured EULA on some obscured website faster than you can read this post. as such your billing practices will be laughed out the door.

The term "de facto standard " should come about as the judge tosses your case out the door.

What's BS, or should I say chickenshit, is doing nothing. It's your property. It's in your home. Why should you have to put up with other people putting advertisements on your desktop?

You don't have to - unless you don't have the stomache for a fight. Then I guess you have accept whatever they dish out.

PPPuuuuuuleeeeeease,

If you had been doing what you were suppose to have been doing in the first place...then the crap wouldn't have gotten on there in the first place! and this whole conversation would be moot. But instead of that you blame others for your mistakes....and then have the audacity to think (remember that your thinking or failure to do so is what got you here) that you have a solution to the problem by some means of your warped imagination. When it is pointed out that it is not a solution but in fact compounding the issues you scream that you are the only one trying to do something.

Doing things in a facetious manner is not the way to go about it! If you seriously wish to be part of the solution to a serious issue then you must act as such. Being flippant about it is just a total waste of time and energy and devalues the entire act by making light of the subject.

I scream? Sounds more like you screaming. Seems you hate someone actually doing something, besides altering host files, disable cookies from certain sites, etc. I go after the source of the problem.

If you don't like that - tough for you. No need to get personal though.

You are absolutely right...I do hate people that do things that devalue a serious issue. And as for you going after anyone...that is a joke in itself, as you have plainly stated you would only do it when you were together with others. (Your words not mine)

So? Anything constructive to add?