Our new Indie Games subforum is now open for business in G&T. Go and check it out, you might land a code for a free game. If you're developing an indie game and want to post about it, follow these directions. If you don't, he'll break your legs! Hahaha! Seriously though.
Our rules have been updated and given their own forum. Go and look at them! They are nice, and there may be new ones that you didn't know about! Hooray for rules! Hooray for The System! Hooray for Conforming!

"gamevance" spyware removal

jeddy leejeddy lee Registered User regular
edited December 2009 in Help / Advice Forum
So I have no idea what I did to have this happen as I'm usually super careful about this stuff, but apparently I got some spyware on my netbook. Or whatever it is refered to these days. Basically I get popups every 20 or so minutes on my internet explorer, then the description box in the left is this little gem:
This advertisement was served by Gamevance.com (GV) casual gaming network in accordance with your membership. GV is an ad supported community; the GV ads you receive support the free games and daily prizes we provide.

GV displays an average of only four ads per day while browsing online. If you would like to deactivate or uninstall your account and stop receiving ads you can do so anytime by clicking here.

And the click here part takes you to this webpage: and gives me these very suspicious uninstallation instructions:
We provide simple Uninstall/Removal method that erase all Gamevance files
Use our manual method by clicking the below link and launching the uninstall software. When
you complete the process all Gamevance files will be removed and no more Gamevance ads will be delivered to your PC. You must restart your PC for the process to be successful.

1) Download our latest Uninstaller from here: CLICK HERE

2) Run Gamevance Uninstaller and follow instructions (Click "Next" on first dialog window and then "Reboot" on second) -> your PC should reboot.

3) After reboot Gamevance should be completely removed from your system. To make sure, check for existence of Gamevance installation files in the Gamevance installation folder (%Program Files%\Gamevance - this is usually C:\Program Files\Gamevance\).

So can I trust their uninstallation instructions, or how do I go about getting rid of this?

jeddy lee on
Backlog Challenge: 0%
Spoiler:

Posts

  • underdonkunderdonk __BANNED USERS
    edited October 2009
    To be completely safe, rebuild. There's no 100% effective measure for getting rid of the vast majority of spyware floating around.

    Back in the day, bucko, we just had an A and a B button... and we liked it.
  • TychoCelchuuuTychoCelchuuu ___________PIGEON _________San Diego, CA Registered User regular
    edited October 2009
  • Eat it You Nasty Pig.Eat it You Nasty Pig. tell homeland security 'we are the bomb'Registered User regular
    edited October 2009
    Little bit of elementary googling says it's malware.

    Malwarebytes will probably kill it, and there also seem to be some "remove gamevance" apps/manual instructions floating around.

    gkcmatch_zps97480250.jpg
    'we got hella people, they got helicopters'
  • evilmrhenryevilmrhenry Registered User regular
    edited October 2009
    From I removed it from a work computer, I don't think it was that hard to remove. It's more of the "We're a legitimate company, honest!" spyware than the "RESISTANCE IS FUTILE" spyware. Don't remember exactly what I did, though.

  • jeddy leejeddy lee Registered User regular
    edited October 2009
    Hmmm... showed up on the add/remove software option from the control panel. That may have done the trick, we'll see.

    Backlog Challenge: 0%
    Spoiler:
  • underdonkunderdonk __BANNED USERS
    edited October 2009
    jack eddy wrote: »
    Hmmm... showed up on the add/remove software option from the control panel. That may have done the trick, we'll see.

    It didn't. It's like cancer telling you it's in remission.

    Back in the day, bucko, we just had an A and a B button... and we liked it.
  • T-boltT-bolt Registered User regular
    edited December 2009
    lol guess who joined up to post in this thread? (hint - it's the person who says it's completely OK to do whatever Gamevance tells you to in order to remove their "software".) :?

    djsigc.jpg
    PSN: P-bass [SSF4, SF3:3s, MVC3, GT5]
  • TetraNitroCubaneTetraNitroCubane Registered User regular
    edited December 2009
    Seriously. The fact that he ended his post with four consecutive smilies and this isn't S&E is like a glowing neon sign. Don't trust that plant further than you can throw a uranium medicine ball.

    I highly suggest that you follow Underdonk's advice and reformat your machine. If you don't know how the malware got on there in the first place, there's no way you can be sure it's gone. Modern rootkit malware is extremely nasty - if it ever gets that much control, it can easily 'hide' itself from even the most aggressive scanners, and do something ill to safemode.

    Ignore mayal completely, and reformat and reinstall your OS (don't repair install) for peace of mind. It may seem like a hassle, but in the long run it's the only way to be sure.

    Edit: Some details on the bug behind the spoiler:
    Spoiler:

    qwlru.png
  • shadydentistshadydentist Registered User regular
    edited December 2009
    Reformat, and stop using Internet Explorer. Install Microsoft Security Essentials (free for all Windows users), scan often, and give Firefox or Chrome a try.

    Steam & GT
    Spoiler:
  • SkyCaptainSkyCaptain Registered User regular
    edited December 2009
    Reformat, and stop using Internet Explorer. Install Microsoft Security Essentials (free for all Windows users), scan often, and give Firefox or Chrome a try.

    Don't forget to make a separate admin account that you only use to update and install programs. Create a different account, limited access, for day to day use. If you decide to use Firefox, get the NoScript and AdBlock+ addons. They're invaluable for making it safer to browse the web.

    The RPG Bestiary - Dangerous foes and legendary monsters for D&D 4th Edition
  • UncleSporkyUncleSporky Registered User regular
    edited December 2009
    While this is good advice, notice that there was a two month bump when the (apparently deleted) plant showed up to push his malware. this was proably taken care of long ago.

    Also, better advice than to stop using Internet Explorer: upgrade to IE8 which is just as safe if not safer than the other browsers (one of only two with a sandbox mode).

    3DS Friend Code: 0989 - 1731 - 9504
    Nintendo Network ID: unclesporky
  • SkyCaptainSkyCaptain Registered User regular
    edited December 2009
    Feh. Firefox forever. Fuck IE. I develop websites and I absolutely loathe writing CSS for IE period. Microsoft is such a fucking dick when it comes to standardization and interpreting CSS in their browser.

    The RPG Bestiary - Dangerous foes and legendary monsters for D&D 4th Edition
This discussion has been closed.